15:32:22 RRSAgent has joined #wpwg 15:32:22 logging to http://www.w3.org/2017/08/22-wpwg-irc 15:32:28 Topic: Tokenization Task Force 15:33:07 agenda: https://lists.w3.org/Archives/Public/public-payments-wg/2017Aug/0013.html 15:33:12 Chair: Ian 15:33:22 present+ 15:33:25 present+ oyiptong 15:34:06 present+ Simon 15:34:12 present+ alyver 15:34:17 present+ 15:34:22 present+ manash 15:35:03 regrets+ Roy 15:35:26 present+ Ken 15:35:39 adamR has joined #wpwg 15:35:40 -> https://lists.w3.org/Archives/Public/public-payments-wg/2017Aug/0013.html Agenda 15:35:48 Ken has joined #wpwg 15:36:04 Wiki updated: https://github.com/w3c/webpayments-methods-tokenization/wiki 15:36:11 MANASH_MC has joined #WPWG 15:37:21 https://github.com/w3c/webpayments-methods-tokenization/wiki#encrypted-card-payment-method 15:37:21 https://github.com/w3c/webpayments-methods-tokenization/wiki#encrypted-card-payment-method 15:38:48 IJ: (Recap of status) 15:39:03 Manash: Should we look at tokenization in the browser? 15:40:06 Q. Are browser vendors interested in implementing other payment methods than basic card? 15:40:46 Q. If we have the ability to encrypt, could browser encrypt otherwise unencrypted info? 15:41:17 Also: Encrypting might be generally useful across payment methods 15:42:34 Topic: Encrypted Card 15:44:33 Questions: 15:44:33 Are there gateways interested in consuming these encrypted blobs? 15:44:33 Encrypt PAN alone or the entire Basic Card data in the PR API response? 15:44:33 In theory a merchant could refer to multiple gateways, but, for simplicity, should we focus on one initially? 15:44:34 Should merchant pass a gateway key or a reference to such a key (to be fetched by the payment app that does the encryption)? We can leverage existing certificate mechanisms to increase security. 15:46:24 IJ: Does this sound interesting? 15:46:55 Manash: Are you envisioning a common encryption standard? 15:47:18 cweiss has joined #wpwg 15:47:18 https://www.w3.org/TR/WebCryptoAPI/ 15:47:21 q+ 15:48:08 ack oy 15:48:16 IJ: I don't know whether Web Crypto features into this 15:48:25 oyiptong: We have not yet discussed how the encryption works 15:48:46 oyiptong: I don't know whether web crypto is relevant here. We also talked to browser vendors about implementing this directly 15:49:06 IJ: I meant web crypto for web-based payment apps 15:49:27 Manash: Suppose that browser has stored card, and cvv is used for auth 15:50:00 ...in the user experience you have in mind, will the browser store encrypted card, and pass on to merchant. Then the merchant passes the card data to the gateway directly, or will the merchant need to decrypt. 15:50:08 oyiptong: I think encrypted blob is passed on directly to gatewy 15:50:24 Mansh: And gateway decrypts. 15:50:27 oyiptong: Yes 15:50:55 Manash: Browser vendors could also convert card information to tokens 15:51:42 IJ: Yes; that sounds like a different payment method 15:51:43 q? 15:52:00 IJ: Any other ideas / interest in encrypted card method? 15:52:24 +1 15:52:36 ACTION: Olivier to write down an encrypted card proposal 15:52:36 'Olivier' is an ambiguous username. Please try a different identifier, such as family name or username (e.g., omaas, oyiptong). 15:52:54 Topic: Network tokens next steps 15:54:30 IJ: How do we proceed? Should we base this on gateway (which has concepts like one-time and expiry) or existing network token spec? 15:54:52 Manash: Agreed that one-time is relevant here (both input and output data) 15:55:25 ...with the prototype that we are building for Money 20/20 we are hoping to implement in the response format; we'd like to align with our discussions here. 15:55:51 ...summary: yes, we would like to work with our colleagues at Amex so that merchant use cases are documented 15:56:00 ...and our prototype will give us some clarity on the spec 15:56:17 IJ: What time frame do you have in mind? 15:56:39 Manash: End of September 15:57:14 https://github.com/w3c/webpayments-methods-tokenization/wiki/Network-Tokens 15:57:51 ...we would like to experiment, then come back with proposal 15:57:56 topic: Next meeting 15:58:38 wait until the week after? 15:58:43 +1 to Sept 5 15:58:43 (5 Sep?) 15:58:51 Resolved: 5 Sep next meeting 15:58:59 RRSAGENT, make minutes 15:59:00 I have made the request to generate http://www.w3.org/2017/08/22-wpwg-minutes.html Ian 15:59:10 alyver has left #wpwg 15:59:17 https://github.com/w3c/webpayments-methods-tokenization/issues 16:07:50 adamR has joined #wpwg 16:08:12 RRSAGENT, make minutes 16:08:12 I have made the request to generate http://www.w3.org/2017/08/22-wpwg-minutes.html Ian 16:08:18 RRSAGENT, set logs public 18:22:52 hober has joined #wpwg 18:27:59 hober has joined #wpwg 19:32:28 Zakim has left #wpwg 20:39:47 cweiss has joined #wpwg 21:08:00 mararn1618 has joined #wpwg 21:24:04 mweksler has joined #wpwg 21:37:34 mweksler has joined #wpwg