16:43:38 <RRSAgent> RRSAgent has joined #webauthn
16:43:38 <RRSAgent> logging to http://www.w3.org/2017/08/02-webauthn-irc
16:43:40 <trackbot> RRSAgent, make logs public
16:43:40 <Zakim> Zakim has joined #webauthn
16:43:42 <trackbot> Zakim, this will be
16:43:42 <Zakim> I don't understand 'this will be', trackbot
16:43:43 <trackbot> Meeting: Web Authentication Working Group Teleconference
16:43:43 <trackbot> Date: 02 August 2017
16:43:55 <weiler> present+ weiler
16:44:45 <weiler> weiler has changed the topic to: agenda: https://lists.w3.org/Archives/Public/public-webauthn/2017Aug/0004.html
16:44:49 <weiler> agenda: https://lists.w3.org/Archives/Public/public-webauthn/2017Aug/0004.html
16:47:17 <jfontana> jfontana has joined #webauthn
16:57:40 <weiler> present+ jfontana
16:57:50 <weiler> chair: jfontana, nadalin
16:59:29 <Rolf> Rolf has joined #webauthn
17:00:35 <jcj_moz> present+ jcj_moz
17:01:54 <weiler> present+ nadalin, christiaan, dirk, kim, selfissued, AkshayKumar
17:02:19 <selfissued> selfissued has joined #webauthn
17:02:29 <selfissued> present+
17:02:41 <weiler> present+ Rolf
17:04:49 <weiler> present+ jeffh
17:05:42 <John_Bradley> John_Bradley has joined #webauthn
17:06:02 <kpaulh> kpaulh has joined #webauthn
17:06:07 <kpaulh> +present
17:06:22 <weiler> present+ angelo
17:06:42 <weiler> present+ kpaulh
17:06:49 <kpaulh> ah, thanks :)
17:07:28 <angelo> angelo has joined #webauthn
17:08:15 <weiler> scribenick: angelo
17:08:20 <angelo> I will scribe until 10:30
17:10:27 <angelo> We are discussing https://github.com/w3c/webauthn/pull/379
17:11:10 <angelo> Tony: if Mike does the change and Jeff approves, can we possibly merge the PR?
17:11:15 <angelo> JeffH: sure
17:11:50 <angelo> Angelo: since the idea originally came from Google (Kim), it'd be great if someone from Google can look at it
17:11:56 <angelo> Kim: I can take a look at it
17:12:34 <angelo> https://github.com/w3c/webauthn/pull/460
17:12:57 <angelo> There's a slight issue that bit 1 is reserved by Google.
17:13:14 <angelo> The bit is used by Google to determine if the info comes from wireless protocol or not
17:13:38 <jeffh> jeffh has joined #webauthn
17:13:42 <jeffh> present+ jeffh
17:14:19 <angelo> Alexei: we at google find values in it. We are fine with documenting the bit but we aren't sure if others are interested
17:14:32 <angelo> Tony: what are the use cases?
17:15:19 <angelo> Alexei: a lot of traffic comes from shared IP. In those shared IP environment, we may think of them as less trust worthy
17:15:44 <angelo> MikeJ: what if statement would the RP write for this?
17:16:34 <angelo> Alexei: most RPs these days have a risk engine. So it's not exactly one if statement.
17:16:40 <Rolf> How does that relate to the "wireless" aspect as mentioned before?
17:16:51 <angelo> JeffH: so this is a data point to be used by the risk engine
17:17:15 <angelo> JeffH: we should really document it
17:19:01 <angelo> It'd be great if Alexei can add a PR for it
17:20:33 <angelo> Alexei: what I am concerned is a human dense environment
17:20:59 <Rolf> So essentially: wireless means more risky.  If that is used in internet café then it is a bad combination?
17:21:18 <angelo> Christiaan: android HID is a higher priority
17:21:38 <angelo> JeffH: has Yubico implemented this bit?
17:22:52 <angelo> Alexei: google has its own applet so that's how we implemented it
17:23:56 <angelo> Wireless means wireless, bluetooth, and NFC
17:24:12 <angelo> Wireless means wifi, bluetooth, and NFC
17:25:02 <weiler> present- kim
17:25:25 <weiler> present+ John_Bradley
17:25:27 <jeffh> weiler kim may be on speaker phone with other googlers
17:25:57 <jeffh> doh!
17:26:09 <angelo> When the authenticator sends the credentials, it would add the bit in there
17:26:40 <angelo> Christiaan: it'd be up to the vendor to decide how they want to treat bit 1
17:27:55 <weiler> present- present
17:29:00 <alexei-goog> alexei-goog has joined #webauthn
17:29:03 <alexei-goog> present+
17:30:38 <angelo> decision: leave the bit as bit 2 for now. JeffH has more comments on it.
17:31:28 <angelo> MikeJ will address the comments from jeff
17:32:08 <Rolf> No objections from my side.
17:32:37 <angelo> The word 'user verification' is really long. MikeJ: is it ok if I add a comment that when it is transmitted over the wire, the word is 'UV'
17:33:48 <angelo> Changing on the wire is better to do now
17:34:31 <Rolf> Do that fix now. It is little work.
17:34:37 <angelo> My later meeting is pushed to a later date. I can continue scribing for now
17:35:04 <angelo> Mke: I will add changes to change 3 names
17:35:30 <angelo> https://github.com/w3c/webauthn/pull/514
17:35:56 <angelo> 514 does what we discussed in March
17:36:36 <angelo> 514 changes from our key data structure from our current ad-hoc structure
17:37:31 <angelo> 514 gives us a standard alg representation
17:38:09 <angelo> Back in the call in March, we agreed to do this
17:38:42 <angelo> JeffH: it'd be problematic for U2F backward compat
17:39:13 <angelo> JC: not really. we already had to convert things to do U2F backward compat
17:39:45 <angelo> JC: this would solve other underlying issues
17:40:18 <angelo> JC: how much did the cdd actually change?
17:40:45 <angelo> JC: how much would the cdd actually change?
17:41:16 <angelo> JC: i will go through the PR and add comments on them
17:42:32 <angelo> https://github.com/w3c/webauthn/pull/515
17:43:24 <angelo> valid domain is a defined term in the whatwg html world
17:43:39 <angelo> JeffH: I will have to chase down the spec to make sure I am right
17:44:34 <angelo> jeffh: I would like to review the PR
17:45:03 <angelo> JeffH: we just wanted to make sure what is merged is good
17:45:35 <angelo> all pull requests cover all the issues
17:45:49 <angelo> 379 is not quite ready yet
17:45:52 <weiler> rrsagent, draft minutes
17:45:52 <RRSAgent> I have made the request to generate http://www.w3.org/2017/08/02-webauthn-minutes.html weiler
17:47:46 <angelo> After all the pull requests that cover the issues are merged, we can publish the new WD-06
17:48:28 <jeffh> yes, there seems to be group agreement to the above.
17:49:23 <angelo> Sam wants to have a few minutes to talk about WebEX
17:50:11 <angelo> If you're joining over call, webex may be more aggressive at kicking you out
17:50:22 <angelo> The new link and passwords will be changed
17:50:45 <angelo> The chair needs to make sure to close the call if sam is not there
17:51:24 <angelo> The agenda mail will no longer include the link to webex
17:52:17 <angelo> Another trivia is that we are in the process of rechartering until we go to the AC
17:52:49 <angelo> John is working on the rechartering and has submitted the application
17:53:12 <angelo> Question: after CR is submitted, new change will require new tests written
17:53:28 <angelo> Question: after CR is submitted, new change will require new explicit tests written
17:53:47 <angelo> JC: it sounds like a good idea
17:54:30 <angelo> Sam: maybe we are close to a time to invite others to read this spec
17:55:01 <angelo> the privacy interest group is particularly interested
17:56:27 <angelo> Tony: I will respond to his 11 points. But I don't think there's any action item for us. It's probably because there's some confusion
17:56:59 <angelo> Maybe next week, we will have a WD06 published
17:58:15 <angelo> MikeJ: unless someone knows how to change Travis CI, I will make the references to IETF as just text
17:58:40 <weiler> rrsagent, draft minutes
17:58:40 <RRSAgent> I have made the request to generate http://www.w3.org/2017/08/02-webauthn-minutes.html weiler
17:58:44 <jeffh> adios :)
17:58:46 <weiler> zakim, list participants
17:58:46 <Zakim> As of this point the attendees have been weiler, jfontana, jcj_moz, nadalin, christiaan, dirk, kim, selfissued, AkshayKumar, Rolf, jeffh, present, angelo, kpaulh, John_Bradley,
17:58:49 <weiler> rrsagent, draft minutes
17:58:49 <RRSAgent> I have made the request to generate http://www.w3.org/2017/08/02-webauthn-minutes.html weiler
17:58:49 <Zakim> ... alexei-goog
17:58:59 <weiler> rrsagent, make logs public
18:11:08 <jfontana> jfontana has left #webauthn
18:15:31 <weiler> trackbot, end meeting
18:15:31 <trackbot> Zakim, list attendees
18:15:31 <Zakim> As of this point the attendees have been weiler, jfontana, jcj_moz, nadalin, christiaan, dirk, kim, selfissued, AkshayKumar, Rolf, jeffh, present, angelo, kpaulh, John_Bradley,
18:15:34 <Zakim> ... alexei-goog
18:15:39 <trackbot> RRSAgent, please draft minutes
18:15:39 <RRSAgent> I have made the request to generate http://www.w3.org/2017/08/02-webauthn-minutes.html trackbot
18:15:40 <trackbot> RRSAgent, bye
18:15:40 <RRSAgent> I see no action items