17:04:03 RRSAgent has joined #webauthn 17:04:03 logging to https://www.w3.org/2021/02/10-webauthn-irc 17:04:05 RRSAgent, make logs Public 17:04:05 present= 17:04:06 Meeting: Web Authentication WG 17:04:09 Agenda: https://lists.w3.org/Archives/Public/public-webauthn/2021Feb/0062.html 17:06:31 rrsagent, please stay 19:13:57 Zakim has left #webauthn 19:16:17 Zakim has joined #webauthn 19:16:20 zakim, please stay 19:16:20 I don't understand 'please stay', wseltzer 19:53:13 jfontana has joined #webauthn 20:00:43 present+ 20:01:12 present+ 20:02:26 elundberg has joined #webauthn 20:02:39 present+ 20:04:10 nsteele has joined #webauthn 20:04:15 present+ 20:04:40 nina has joined #webauthn 20:05:00 present+ nadalin, agl, akshay, davidturner, jeffh, jeremyerickson, matthewmiller, selfissued, ninasatragno, raerivera, sbweeden, timcappalli 20:05:46 present+ johnbradley 20:06:58 present+ nina 20:07:43 tony: untriaged issues. 20:08:17 if I put a 🍔 emoji in the logs will zakim parse it properly 20:08:27 selfissued has joined #webauthn 20:08:36 present+ 20:09:09 https://github.com/w3c/webauthn/pull/1559 20:09:56 tony: don't this this will block PR, can assign to futures. 20:10:17 ...close or move to open status 20:10:36 MMiller: keep it open and close it out in the future. 20:11:02 https://github.com/w3c/webauthn/pull/1560 20:12:15 jeffH: in ctap 2.1 can manage discoverable credentials - this is not the web authn level 20:12:26 tony: wait for a response? 20:12:33 jeffH: wait for David. 20:12:38 ...to respond 20:12:45 iamkale has joined #webauthn 20:13:28 present+ mmiller 20:13:45 There we go 20:13:48 akshay: this is food for thought here 20:14:08 ...delete it. 20:14:15 https://github.com/w3c/webauthn/pull/1563 20:14:44 tony: seems like a deployment issue 20:15:08 nickS: I can flag this and discuss next week. I can chat with felix in CG 20:15:36 https://github.com/w3c/webauthn/pull/1566 20:16:07 tony: go back to #1565 20:16:14 https://github.com/w3c/webauthn/pull/1565 20:18:24 akshay: this is a newe API, something more for browsers to adapt 20:18:54 agl: can't get rid of the old name. 20:19:01 jeffH: in the actual api 20:19:16 akshay: close this is my suggestion 20:19:20 tony: any others? 20:19:38 mmiller: does levl 2 introduce the idea, is that the confusion 20:20:04 agl: resident keys have confused some people, we tried to clarify, but ran into old fields 20:20:13 ...want to support browsers that don't know Level 2 20:20:43 jefh: we did not change web IDL 20:22:01 mmiller: level 2 mandates values 20:22:03 I also suggest we close this 20:22:28 bradley RP still needs to send the old values for the old browsers 20:22:58 This would make things worse - not better 20:23:50 jeffH: we have a futures catchall 20:23:58 tony: let's put it there 20:24:01 https://github.com/w3c/webauthn/pull/1566 20:24:55 tony: need apple on the call 20:25:24 nickS;can submit to webkit. I will close this 20:25:31 https://github.com/w3c/webauthn/pull/1567 20:27:13 akshay: trying to create credential, need exclude list. 20:27:24 tony: close? 20:27:49 agl: don't think we should. Lucas is github, if they are struggling, others will 20:30:40 bradely: don't want to ask user to re-authenticate, this goes back to our past, have a hybrid-command 20:32:26 agl: what is the concrete use case? 20:32:53 nickS:I think this is a specific implementation issue 20:35:09 agl: let's reply and ask 20:36:21 mmiller: lots of RPs will struggle here from a naming perspective 20:37:02 bradley: i think this is more for re-authenticate. does not make sense for make credential 20:37:09 ..or before it happens 20:37:50 bradley: let's find out what he wants.= 20:38:12 nicks: I will follow up with him. and have him submit apple bug to webkit 20:38:21 https://github.com/w3c/webauthn/pull/1568 20:39:00 akshay: I think this is probably not needed. 20:39:17 agl: is lack of android support the crux here 20:39:29 ...yes 20:40:19 mmiller: what is going on here? 20:40:35 bradely: android does not support discoverable creds or CTAP2 20:41:42 tonhy: what do we do with #1568 20:41:51 ...move to futures 20:41:55 agl: L3? 20:42:05 tony: move to L3 20:42:48 https://github.com/w3c/webauthn/pull/1569 20:44:00 akshay: I need to look more on this, will follow-up 20:45:20 ...earlier, can add external key, did not specify transport. all keys are second factor. problem is we dont' have all the info. we need 20:45:56 tony: akshay will follow-up 20:46:13 jeeffH: do we need more information from cred props 20:48:20 selfissue: these all seem like L3 issuese 20:48:31 tony: I think we are done with open issues and triaged issues 20:48:52 ...two to follow up on #1560 and #1566. won't impact L2 21:00:17 rrsagent, draft minutes 21:00:17 I have made the request to generate https://www.w3.org/2021/02/10-webauthn-minutes.html wseltzer 21:00:37 chair: Nadalin, Fontana 21:00:42 rrsagent, draft minutes 21:00:42 I have made the request to generate https://www.w3.org/2021/02/10-webauthn-minutes.html wseltzer 21:01:54 rrsagent, bye 21:01:54 I see no action items