18:43:39 <RRSAgent> RRSAgent has joined #webauthn
18:43:39 <RRSAgent> logging to https://www.w3.org/2021/07/14-webauthn-irc
18:43:40 <Zakim> RRSAgent, make logs Public
18:43:41 <Zakim> Meeting: Web Authentication WG
18:43:42 <wseltzer> Agenda: https://lists.w3.org/Archives/Public/public-webauthn/2021Jul/0075.html
18:56:02 <jfontana_> jfontana_ has joined #webauthn
18:56:20 <jfontana_> present+
19:00:02 <elundberg> elundberg has joined #webauthn
19:02:37 <jfontana_> thank you, Wendy
19:03:21 <addison> addison has joined #webauthn
19:03:41 <nsteele> nsteele has joined #webauthn
19:03:53 <nsteele> present+
19:04:08 <addison> present+
19:04:10 <nina> nina has joined #webauthn
19:04:13 <jfontana_> Charter: what is the target date for approval?
19:05:25 <jfontana_> https://github.com/w3c/webauthn/pull/1630
19:05:50 <jfontana_> tony: waiting for Mike to get on the call. Looks like he stated his concern in writing.
19:05:54 <jfontana_> https://github.com/w3c/webauthn/pull/1622
19:06:53 <jfontana_> jeff: I will put a flag on this, I said my peace
19:06:56 <jfontana_> https://github.com/w3c/webauthn/pull/1621
19:07:13 <jfontana_> elundberg: t his is a work in progresss
19:07:28 <jfontana_> tony: shane, are your issues answered?
19:07:32 <matthewmiller> matthewmiller has joined #webauthn
19:07:34 <jfontana_> shane: I will check it again.
19:07:41 <jfontana_> https://github.com/w3c/webauthn/pull/1676
19:07:51 <jfontana_> tony: work in progress?
19:08:05 <jfontana_> jeff: yes, in progress
19:08:10 <jfontana_> https://github.com/w3c/webauthn/pull/1425
19:08:19 <jfontana_> tony: work in progress
19:08:22 <jfontana_> ?
19:08:48 <jfontana_> elundberg: yes, in progress
19:08:52 <jfontana_> https://github.com/w3c/webauthn/pull/1649
19:09:37 <jfontana_> elundberg: This would merge into PR #1621.
19:09:49 <jfontana_> ...wnat to do as part of #1621
19:09:57 <jfontana_> jeff: yes, we should do this.
19:10:08 <jfontana_> selfissue: I will look at it
19:10:14 <jfontana_> jbradley: I will look
19:12:06 <selfissued> selfissued has joined #webauthn
19:12:19 <selfissued> present+
19:12:32 <matthewmiller> present+
19:13:23 <jfontana_> https://github.com/w3c/webauthn/issues/1646
19:13:34 <jfontana_> agl: think we should wait to end, things will change
19:13:57 <jfontana_> Addison: happy to discuss
19:14:03 <jfontana_> tony: what do you want us to do?
19:14:26 <jfontana_> addision: work out right guidance for language metadata
19:14:34 <jfontana_> ...some editorial problems
19:14:45 <jfontana_> agl: no one is going to implement it
19:15:10 <jfontana_> addision: lets work out best way to fix the metadata issue
19:15:18 <jfontana_> agl: do PR for the old chain.
19:15:32 <jfontana_> ...there is one field and can only be one.
19:16:01 <jfontana_> ...we were trying to accommodate everything you specified.
19:16:07 <jfontana_> addison: what is the best way to start
19:16:19 <jfontana_> agl: we will adopt what you recommend
19:16:26 <jfontana_> ...I could trun something into a PR
19:16:35 <jfontana_> addison: Ok
19:17:04 <jfontana_> ...I want to make sure we don't recommend something is a non-starter
19:17:22 <jfontana_> agl: it is unlikely for  chrome to implement this.
19:17:40 <jfontana_> ...we have not heard concerns
19:17:51 <jfontana_> ...I only speak for chrome
19:18:51 <jfontana_> jbradley: some issues. RP has to know what serialization
19:20:57 <jfontana_> addison: if we come up with proposed it looks like it needs to be a single field
19:21:06 <jfontana_> jbradley: we cold have a metadata field
19:22:53 <jfontana_> tony: Addision can you open a new PR? Do you want this in a first working draft
19:23:30 <jfontana_> tony: we will deal with the five issues after that
19:23:37 <selfissued> I requested changes to the tokenBinding PR in https://github.com/w3c/webauthn/pull/1630#pullrequestreview-706636912
19:23:54 <jfontana_> addsion: let us know if you have questions or issues.
19:23:59 <jfontana_> ...we will track
19:24:13 <jfontana_> https://github.com/w3c/webauthn/issues/1640
19:25:05 <jfontana_> akshay: we want to do this at scale.
19:25:36 <jfontana_> ...#1614 is very much separated into its own issue, because it talks about syncing keys
19:25:50 <jfontana_> ...this is more about how you do the recovery
19:26:09 <jfontana_> ...#1640 more about RPs
19:28:33 <jfontana_> tony: we haven't had this issue like web payments have, but we have had lots of discussion with Anders
19:28:46 <jfontana_> ...leave this open
19:28:53 <jfontana_> https://github.com/w3c/webauthn/issues/1639
19:29:19 <jfontana_> agl: the answer is in #1637
19:29:43 <jfontana_> ...lets wait for comments then we can resolve
19:29:47 <jfontana_> https://github.com/w3c/webauthn/issues/1638
19:29:55 <jfontana_> tony: this is Anders
19:30:14 <jfontana_> agl: #1637 may resolve this
19:30:21 <jfontana_> ...help resolve this
19:30:48 <jfontana_> https://github.com/w3c/webauthn/issues/1637
19:30:59 <jfontana_> agl: this is quite large, people need time to read
19:31:33 <jfontana_> ...goal is to use web authn to replace passwords
19:32:07 <jfontana_> ...we think backup in on phones. we layout design of how phones can be  used an authenticators
19:32:53 <jfontana_> ...there are ecosystems. apple, android, windows, etc.
19:33:02 <jfontana_> tony: this is across ecosystems
19:33:32 <jfontana_> agl: you could send assertion across eco-systems
19:33:46 <jfontana_> ...see useful changes in web authn
19:33:55 <jfontana_> ...largest one is conditional UI
19:33:59 <jfontana_> ...we are updating it.
19:34:05 <jfontana_> ...adding auto complete
19:35:07 <jfontana_> ...we think this makes sense
19:35:21 <jfontana_> ...bits to fill in - want transport in assertion
19:36:13 <jfontana_> ...what we are saying we will tell websites to put cred IDs in exclude list.
19:36:21 <jfontana_> ...we will tell website valid state error
19:36:49 <jfontana_> ...re-authentication is  best prractice.
19:37:10 <jfontana_> ...upgrade to web-authn is a suggestion; read
19:41:34 <jfontana_> ...akshay has a follow-up and people should read that.
19:42:28 <jfontana_> MMiller: lot of these things are addressed, there are some mentions of specific options; are we getting in realm of magical options
19:42:50 <jfontana_> ...do these options work, that is a question
19:43:25 <jfontana_> ...report signaling, intent is they are  immediate signals to help sync authnticators
19:44:35 <jfontana_> agl: I think these options make sense, I don' t think they are magical
19:48:17 <jfontana_> agl: whole issues assume discoverable credentials, think this is best for consumers
19:51:08 <jeffh> https://github.com/w3c/webauthn/issues/1637
19:51:17 <jeffh> present+
19:52:07 <jfontana_> akshay: has soem concerns, discoverable vs. non-discover; preventing intentional overwrites, but most of signals here we support
19:52:28 <jfontana_> ...we do have some differences of opinions
19:52:46 <jfontana_> ...and for some definitions
19:53:13 <jfontana_> ...by and large we looked at issues, and we noted some patterns we need to solve
19:53:28 <jfontana_> ...it is mostly about mass adoption.
19:53:59 <jfontana_> tony: time frame, seems like big change
19:54:36 <jfontana_> agl: we will work on getting everything discussed, some will be longer than others.
19:55:07 <jfontana_> ...want this to land this calendar year
19:55:28 <jfontana_> elundberg: this seems like a reasonable ides, we have to look at it.
20:01:13 <jfontana_> jbradley: we should talk about what durable means.
20:04:36 <jfontana_> tony: when do we run out of re-charter time
20:04:53 <jfontana_> wendy: Dec. 31
20:05:00 <jfontana_> tony: what is target date?
20:05:30 <jfontana_> ...want end of august
20:05:41 <jfontana_> akshay: we want to start sooner, sooner the better
20:06:17 <jfontana_> tony: try to close on charter at the next meeting.
20:07:48 <jfontana_> rrsagent, make logs public
20:08:03 <jfontana_> rrsagent, draft minutes
20:08:03 <RRSAgent> I have made the request to generate https://www.w3.org/2021/07/14-webauthn-minutes.html jfontana_
20:09:51 <jfontana_> *minutes updated
20:10:07 <jfontana_> Zakim, list attendees
20:10:07 <Zakim> As of this point the attendees have been jfontana_, nsteele, addison, selfissued, matthewmiller, jeffh
20:10:22 <wseltzer> chair: Nadalin, Fontana
20:10:26 <wseltzer> present+
20:10:32 <wseltzer> rrsagent, draft minutes
20:10:32 <RRSAgent> I have made the request to generate https://www.w3.org/2021/07/14-webauthn-minutes.html wseltzer
22:25:47 <Zakim> Zakim has left #webauthn