12:04:30 <RRSAgent> RRSAgent has joined #wot-sec
12:04:30 <RRSAgent> logging to http://www.w3.org/2017/10/23-wot-sec-irc
12:04:46 <elena> elena has joined #wot-sec
12:04:55 <kaz> Meeting: WoT IG - Security
12:05:13 <kaz> present+ Kaz_Ashimura, Michael_McCool, Elena_Reshetova, Zoltan_Kis
12:06:24 <kaz> Agenda: https://www.w3.org/WoT/IG/wiki/IG_Security_WebConf#Agenda
12:06:47 <barryleiba> barryleiba has joined #wot-sec
12:06:47 <kaz> scribenick: kaz
12:07:08 <kaz> present+ Uday_Davuluru
12:07:43 <barryleiba> present+ Barry_Leiba
12:07:46 <kaz-win> kaz-win has joined #wot-sec
12:07:55 <kaz> -> https://www.w3.org/2017/10/16-wot-sec-minutes.html prev minutes
12:07:56 <uday> uday has joined #wot-sec
12:08:55 <Miushima> Miushima has joined #wot-sec
12:08:55 <zkis> present+ Zoltan_Kis
12:09:04 <kaz> present+ Tomoaki_Mizushima
12:09:12 <kaz> topic: Previous mintues
12:09:47 <kaz> mm: goes through the prev minutes
12:10:17 <kaz> kaz: Soumya is already included in the wot-security-tf team
12:10:36 <kaz> mm: the minutes are fine by me
12:10:59 <kaz> ... any objections?
12:11:01 <kaz> (none)
12:11:04 <kaz> minutes approved
12:11:16 <kaz> topic: review schedule
12:11:38 <kaz> -> https://www.w3.org/WoT/IG/wiki/IG_Security_WebConf#Schedule proposed schedule
12:12:10 <barryleiba1> barryleiba1 has joined #wot-sec
12:12:23 <kaz> kaz: can send a publication request on 27th
12:12:25 <kaz> mm: ok
12:12:40 <kaz> ... schedule looks good
12:12:58 <kaz> topic: PRs
12:13:07 <kaz> -> https://github.com/w3c/wot-security/pulls PRs
12:13:33 <kaz> -> https://github.com/w3c/wot-security/pull/47 pr 47 - remove redundant security objectives content
12:13:50 <kaz> mm: will clean this up
12:13:57 <kaz> ... objections to merge this?
12:14:04 <kaz> ... straight forward
12:14:07 <kaz> (no objections)
12:14:13 <kaz> mm: merges pr 47
12:15:07 <kaz> ... working branch is gone now
12:16:41 <barryleiba> barryleiba has joined #wot-sec
12:17:11 <kaz> https://services.w3.org/htmldiff
12:17:32 <McCool> https://services.w3.org/htmldiff?doc1=https%3A%2F%2Frawgit.com%2Fw3c%2Fwot-security%2Fmaster%2Findex.html&doc2=https%3A%2F%2Frawgit.com%2Fw3c%2Fwot-security%2Fworking%2Findex.html
12:17:51 <kaz> mm: terminology changes
12:20:55 <kaz> ... solution including the entire hardware as well?
12:24:13 <kaz> ... (goes through the changes)
12:26:03 <kaz> ... acronym "Mgm" means "Management"
12:26:36 <kaz> ... Management API or management interface?
12:26:48 <kaz> zk: not API
12:27:10 <kaz> mm: "interface" for network API
12:27:28 <kaz> zk: no management API for Scripting API (so far)
12:28:01 <kaz> mm: scripting api will talk with network interface. right?
12:28:31 <kaz> zk: API has a bit easier connotation
12:29:01 <kaz> ... service carried out by network interface would require security
12:30:35 <kaz> mm: any other interesting points?
12:30:41 <kaz> ... (security objectives)
12:31:48 <kaz> ... TBD here and there (right above "2.3.2 Scenario 2 - Business/Corporate environment)
12:32:24 <kaz> ... added section "3. Existing Security Best Practices in related fields"
12:32:49 <kaz> ... here most about TD
12:32:56 <kaz> ... "4.1 Secure Practices for designing a Thing Description"
12:33:05 <kaz> s/environment/environment"/
12:33:28 <kaz> ... section 8
12:33:32 <kaz> ... no summary yet
12:33:43 <kaz> ... lot of work to do
12:34:13 <kaz> ... fine with going with this as a FP Note?
12:35:04 <kaz> ... Elena, could you create a PR on management?
12:35:31 <kaz> ... let's ask the group for review on Wednesday, Oct. 25
12:35:55 <kaz> ... please state issues by Wednesday
12:36:19 <kaz> ... I'm OK with this published as a first Note
12:36:39 <kaz> ... ready or not?
12:37:09 <kaz> bl: let's start the review
12:37:36 <kaz> uday: would leave the majority
12:37:42 <kaz> ... fine as the first draft
12:38:00 <kaz> mm: Zoltan?
12:38:22 <kaz> ... think mature as a first draft
12:38:35 <kaz> s/... think/zk: think/
12:38:37 <kaz> mm: ok
12:38:44 <kaz> ... let's move forward
12:39:15 <kaz> ... if there are too many issues on Wednesday, let's have discussion at TPAC
12:39:26 <kaz> er: Matthias's comment?
12:39:59 <kaz> mm: you can ask him to review the latest draft
12:40:00 <McCool> https://rawgit.com/w3c/wot-security/working/index.html#examples-of-wot-security-configurations
12:40:38 <kaz> mm: let's see if there is anything to be merged before the publication
12:41:35 <McCool> McCool: I will merge changes to master branch, then send email to group pointing at result as RC
12:41:51 <McCool> ... after Elena changes Mgm API -> Management Interface
12:41:53 <kaz> i|McCool:|kaz: we should merge all the changes to the master branch before asking the whole group for publication approval|
12:42:43 <kaz> topic: ISSUE 46
12:43:02 <kaz> -> https://github.com/w3c/wot-security/issues/46 issue 46 on "Reference Fetch standard in addition to CORS"
12:43:18 <kaz> mm: stay open
12:43:45 <kaz> topic: ISSUE 44
12:44:24 <kaz> -> https://github.com/w3c/wot-security/issues/44 issue 44 on "Make links to the WoT Terminology from the WoT Architecture document"
12:44:41 <kaz> mm: how to refer definitions from external files
12:44:46 <kaz> s/files/files?/
12:44:50 <kaz> ... using ReSpec
12:45:23 <kaz> zk: you can do that in ReSpec
12:45:36 <kaz> ... attach tags
12:46:14 <kaz> ... link to external documents
12:46:47 <kaz> ... you can remove definitions inside the draft later
12:47:15 <kaz> topic: ISSUE 41
12:47:31 <kaz> -> https://github.com/w3c/wot-security/issues/41 issue 41 on "Clean up Security Objectives section"
12:47:33 <kaz> mm: can close it?
12:47:36 <kaz> er: ok
12:47:44 <kaz> mm: closed issue 41
12:47:59 <kaz> topic: ISSUE 40
12:48:17 <kaz> -> https://github.com/w3c/wot-security/issues/40 issue 40 on "Align Threat model with IETF IoT RFC"
12:48:38 <kaz> mm: assign to Elena
12:49:01 <kaz> topic: ISSUE 32
12:49:21 <kaz> -> https://github.com/w3c/wot-security/issues/32 issue 32 on " Cite WoT Architecture Doc in Intro"
12:49:23 <kaz> mm: done
12:49:31 <kaz> ... closes the issue 32
12:50:41 <kaz> topic: NDSS DISS workshop
12:50:46 <kaz> ... CFP done
12:50:57 <kaz> ... working on logistics for white paper
12:51:08 <kaz> s/... CFP/mm: CFP/
12:51:12 <kaz> topic: AOB
12:51:16 <kaz> mm: working on POC
12:51:32 <kaz> ... a few things to discuss on security
12:51:55 <kaz> ... after TPAC, concrete discussion on security
12:52:10 <kaz> ... the goal is using TLS, etc., for the interface
12:52:23 <kaz> ... CoAPS, HTTPS, etc.
12:52:34 <kaz> ... anything else?
12:52:39 <kaz> er: nothing from me
12:52:46 <kaz> mm: ok
12:52:54 <kaz> ... the next meeting should be the last one before TPAC
12:53:52 <kaz> ... (creating a new issue)
12:54:22 <kaz> -> https://github.com/w3c/wot-security/issues/48 issue 48 on "Review Security Learnings from TPAC2017"
12:54:27 <barryleiba> barryleiba has left #wot-sec
12:54:34 <kaz> rrsagent, make log public
12:54:46 <kaz> rrsagent, draft minutes
12:54:46 <RRSAgent> I have made the request to generate http://www.w3.org/2017/10/23-wot-sec-minutes.html kaz
12:55:14 <Miushima> Miushima has left #wot-sec
14:21:53 <Zakim> Zakim has left #wot-sec