18:45:48 <RRSAgent> RRSAgent has joined #webauthn
18:45:48 <RRSAgent> logging to https://www.w3.org/2021/12/15-webauthn-irc
18:45:51 <Zakim> RRSAgent, make logs Public
18:45:51 <Zakim> Meeting: Web Authentication WG
18:46:14 <wseltzer> wseltzer has changed the topic to: 15 December Agenda: https://lists.w3.org/Archives/Public/public-webauthn/2021Dec/0023.html
18:46:17 <wseltzer> Agenda: https://lists.w3.org/Archives/Public/public-webauthn/2021Dec/0023.html
19:50:31 <jfontana> jfontana has joined #webauthn
19:50:41 <jfontana> present+
20:06:43 <matthewmiller> matthewmiller has joined #webauthn
20:11:05 <nsteele> nsteele has joined #webauthn
20:16:24 <nina> nina has joined #webauthn
20:16:46 <elundberg> elundberg has joined #webauthn
20:16:50 <elundberg> present+
20:17:19 <jeffh> present+
20:18:59 <nsteele> present+
20:31:23 <jeffh> scribenick jeffh
20:32:25 <jeffh> discussion of Akshay's concerns wrt the Secure Payment Confirmation SPC  discussion, see this comment onwards: https://github.com/w3c/webauthn/issues/1667#issuecomment-993959019
20:37:05 <jeffh> Akshay and interested parties will join the WPWG's SPC-webauthn taskforce call in the future inorder to sort this out with SPC folks
20:37:56 <jeffh> rrsagent, draft minutes
20:37:56 <RRSAgent> I have made the request to generate https://www.w3.org/2021/12/15-webauthn-minutes.html jeffh
20:39:40 <wseltzer> s/scribenick/scribenick:/
20:39:49 <wseltzer> rrsagent, draft minutes
20:39:49 <RRSAgent> I have made the request to generate https://www.w3.org/2021/12/15-webauthn-minutes.html wseltzer
20:43:21 <jeffh> Also in attendance, Wendy S., Adam L,  Tim C., E. Lundberg, J. Bradley, Akshay K.
20:45:09 <jeffh> Emil: notes that there is sort of a potential de-anonymization attack with the proposed 3d party credentials
20:47:11 <jeffh> ... will note these details in a comment on webauthn issue #1667
20:47:50 <jeffh> jbradley:  how many "cred types" do we want to allow for at the CTAP layer ?
20:49:59 <jeffh> akshay:  use a DWORD of bit flags
20:52:07 <jeffh> agl: "put it in large blob" ie an unecrypted portion of largeBlob.  there's considerations with credprotect... ans: dont make payment credentials cred protect level 3
20:58:11 <jeffh> nick steele: he and Matt Miller are putting together material on developer considertations and will submit as an issue before the next meeting 12-Jan-2022
20:58:31 <wseltzer> [Next meeting Jan. 12]
21:00:04 <jeffh> rrsagent, draft minutes
21:00:04 <RRSAgent> I have made the request to generate https://www.w3.org/2021/12/15-webauthn-minutes.html jeffh