17:07:57 RRSAgent has joined #webauthn 17:07:57 logging to http://www.w3.org/2017/10/04-webauthn-irc 17:07:59 RRSAgent, make logs public 17:07:59 Zakim has joined #webauthn 17:08:01 Meeting: Web Authentication Working Group Teleconference 17:08:01 Date: 04 October 2017 17:08:09 present+ jcj_moz 17:08:23 present+ jeffh 17:08:38 present+ elundberg 17:08:47 present+ jfontana 17:08:54 present+ apowers 17:09:03 sec, getting a GTM 17:09:34 are we restricted from using a GTM channel? 17:10:10 present+ 17:10:35 https://global.gotomeeting.com/join/171358933 17:11:16 can everyone get into the GTM? 17:11:30 akshayku has joined #webauthn 17:11:36 WD07 has joined #webauthn 17:11:46 we are moving to this URL https://global.gotomeeting.com/join/171358933 17:12:24 .. since webex didn't work properly today 17:13:00 am waiting for Rae Hayward's screen.... 17:13:30 on the goto meeting; 17:13:58 cannot hear anything as yet tho my local audio works 17:13:59 present+ 17:14:02 present+ 17:14:49 present+ 17:14:56 "connecting to audio......" 17:15:15 audio restored 17:16:03 Tony: At FIDO meeting last week. Some things were moved along at FIDO, CTAP to RD3 17:16:17 Tony: 17:16:47 if somebody objects to an off-cycle meeting we can't hold it as a W3C meeting. it will have to be private. 17:17:08 Tony: does anyone object to another meeting in a week and having it be official W3C 17:17:30 dial in services provided by Christiaan/Google 17:18:21 Tony: are there any objections? 17:18:50 Tony not hearing any. No objections for face-to-face and phone in. I will put it on mailing list and ask again for objections 17:19:56 Christiaan: I will send the details to the group 17:20:05 thanks jeffh 17:20:51 Tony: we will have a normal call on Wed. also 17:21:37 sorry, what's the date / time / location for the off-cycle meeting? 17:22:01 lost audio 17:22:46 back with audio 17:23:22 can someone enter the issue being discussed. 17:23:47 https://github.com/w3c/webauthn/pull/498 17:23:59 thank you 17:24:21 539: 17:25:36 https://github.com/w3c/webauthn/pull/539 17:25:48 PR will be reviewed by JeffH, others. 17:26:42 544: https://github.com/w3c/webauthn/pull/544 17:27:13 Tony: complete the part in FIDO land...where do we stand with changes that M.Jones requested 17:27:27 weren't we on 558? 17:28:09 Christiaan I made changes a few days ago 17:28:10 https://github.com/w3c/webauthn/pull/558 17:28:20 tony: jeffH you want to review 17:28:47 Christiaan: I am picking userhandle people love it 17:28:54 JeffH: sounds good to me. 17:29:05 Christiaan: I am merging 17:29:29 582: https://github.com/w3c/webauthn/pull/582 17:29:42 tony: restore the name back to normal 17:30:28 christiaan: Dirk will work on the mapping 17:31:24 Tony: this will be in RD04 CTAP 17:31:30 Tony: can we close this 17:31:35 jeffH: fine by me. 17:31:49 Christiaan: can we keep it open until we have PR in CTAP land 17:31:52 Tony: OK 17:32:18 597: https://github.com/w3c/webauthn/pull/597 17:32:30 Tony: this is rolf's 17:33:42 Rolf : allows the sig counter or signature generated nonce 17:33:53 ....I think it is ready. 17:34:04 ....if I get all the conflicts I am done 17:34:09 tony: we moving it? 17:34:10 I think it is ready to go 17:34:41 rolf: 597 was a FIDO decision, I think most would prefer this one 17:34:50 ....give the green light and I will merge 17:34:54 tony: any objections 17:35:09 rolf : 597 is better than alternative 17:35:32 597 was preferred over 539 17:35:39 close 539? 17:36:10 JeffH: fine by me, if everyone is comfortable. 17:36:21 Akshay: lets close 539 17:36:30 tony: rolf can you do that and fix 597 issues 17:36:39 tony: and let jeffH review 17:36:47 JeffH: happy to look at it. 17:37:35 tony some issues for wd07, about 30 open issues. 17:37:53 ....still tremendous issue on cancel 17:38:07 ..do we have a conclusion on cancel 17:38:20 jeffH: you are referring to PR 544? 17:38:22 toney: yes 17:38:34 ....we need to wait for angelo on this 17:38:40 ....we have issue 316 17:38:48 ...stil an issue JC? 17:39:17 https://github.com/w3c/webauthn/issues/316 17:39:53 jcjone: we still need to solve it. 17:40:01 tony: it is not a breaking choice 17:40:19 jcjones: I don't think we need to hold wd07 hostage for it 17:40:32 tony: i am moving it off. 17:40:54 akshay: can we move to the breakage first 17:41:18 present+ weiler 17:41:21 tony: breaking change , a couple 547 and 584...do 584 first 17:41:40 ....there is desireccccccegihhntgcrbguhbgrgijdvngngvibtnjrlcrun 17:42:08 sorry about that :-( 17:42:35 rolf: this would be a new attestation type in the end 17:42:41 ...we have to think that through 17:43:07 akshay: what he is saying just have two different signatures. 17:43:44 ...we do not have agreement what this thing should look like 17:46:03 christiaan: what are we breaking here? 17:46:42 akshay: we can do it here, my concern is we can look at it and have discussion. 17:46:54 ...on ething is prvacy, onthing is how sig comes up. 17:47:16 ...I want this privacy CA 17:47:21 present+ AkshayKumar, battre, John_Bradley, nadalin 17:47:49 ... 17:48:44 jbradley: if we change privacy of attestation we might have unintended consequences 17:48:54 ...it probably needs its own security analysis 17:49:04 jeffH: i tend ot agree with that 17:49:26 tony: hearing we should open a new issues for new attestation format and not changing the format we have 17:49:32 akshay: yes. 17:49:51 tony: Christiaan, do you object? 17:50:10 Christiaan: I will see if there are any, i can't think of any right now 17:50:33 ...an issues 17:50:34 akshay: thanks 17:51:59 thanks for clarification jeffH 17:56:26 don't do anything with 584 open up a new issue 17:56:56 tony: 547 , where does dirk or google stand on this 17:57:41 https://github.com/w3c/webauthn/issues/547 17:58:19 jcjones: I'm not an expert, but I think this is OK. 17:58:44 tony: christiaan can you check with dirk and close this issue? 17:58:51 Christiaan: yes 17:59:08 tony: I think these are the two issues that are potentially breaking 17:59:25 ...looks like we can close one, and a new format may mean the other is not breaking 17:59:31 akshay: OK 17:59:36 tony: we are out of tiem. 18:01:16 apowers: first..... second, maybe interop in Nov. (CTAP) 18:01:35 missed the first, can anyone add. 18:01:50 tony: maybe host in Seattle 18:02:23 tony: i would like to see wd08 interop so shortly after TPAC we can have some wd08 implementations that interop. 18:02:46 ...Christiaan can you think about hosting a second interop. 18:03:05 apowers. FIDO approved CTAP for publication. We will do that. 18:03:19 tony: i should be in a public spot. make sure everyone can get at it. 18:03:36 tony: apowers can you post a link on the W3C WebAuthN mailing list 18:03:40 apowers: will do. 18:04:04 tony: we need to make a reference to it in the WebAuthN spec 18:04:16 cse 18:04:18 close 18:04:51 rrsagent, draft minutes 18:04:51 I have made the request to generate http://www.w3.org/2017/10/04-webauthn-minutes.html weiler 18:05:05 rrsagent, make logs public 18:07:10 chair: nadalin, jfontana 18:07:12 rrsagent, make logs public 18:07:22 rrsagent, draft minutes 18:07:22 I have made the request to generate http://www.w3.org/2017/10/04-webauthn-minutes.html weiler