W3C

– DRAFT –
Web Authentication WG

04 May 2022

Attendees

Present
agl, akshay, davidturner, jfontana, johnbradley, kaiju, martinkreichgauer, nadalin, nikbhattacharya, nina, nsteele, sbweeden, timcappalli, wseltzer
Regrets
-
Chair
Fontana, Nadalin
Scribe
jfontana_

Meeting minutes

tony: face to face June 9

<wseltzer> https://www.w3.org/2002/09/wbs/87227/webauthn2022/

tim: please sign up, even if you are remote.

tony: web payments WG tomorrow

<wseltzer> https://github.com/w3c/webpayments/wiki/Remote-Agenda-202205

tony: like to close on licensing update
… waiting for David Turner
… do people have to rejoin

wendy: still re-join phase

tony: change it now charter has to include new licensing.
… if we change it now, wnedy, does it have to go to Board approval or back out

Wendy: let me see

tony: not hearing any objections, - to change the copyright license. The new one allows peopel to take different parts of this as needed.

wendy: more premissive
… can make derivative woirks - you can fork the spec

shane: I need alink to the new license.
… need legal to review. I need to bring a license change to my folks

agl: if re-license is recharter, lets wait.

agl: its nice not to have copyright

wendy: tried to clarify in the license, that even the less permissive license permits use of excerpts.

agl: more premissive would be nice to have.

wendy: most working group charting now use the more premissive
… what if we need to take things elsewhere.

Tony: turn to PRs

<wseltzer> Permissive Software and Document License

<wseltzer> nadalin: 1663

<wseltzer> agl: planning to make updates

<wseltzer> nadalin: 1576

<wseltzer> ... non-modal

<wseltzer> nina: we'd like Akshay to take a look

<nsteele> https://github.com/w3c/webauthn/pull/1576

wendy, I am back

tony: jeff hodges, a former editor designation. This is Jeff's decision

https://github.com/w3c/webauthn/pull/1718

Shane: I was in this discussion for approving changes
… there was some objections, asked to submit PR, that is not #1718
… this is the PR

s/that is #1718

bradley: a user verification issue, does not recognize some L2 changes

agl: it does seem an opposite change I would be more in favor
… argument is at creation time

shane: is there a case at registratio, if you set prefer you might now require it

agL: RP many change at the system can learn.

tony: write this up and we can close this one.

shane: we could say this is a reason, but not definitive

tony: some triage

akshay: samething, sometimes you improve fingerprint matching

tony: there is not much support on this

<dwaite> Just a FYI, the Mac platform Secure Enclave exposes a flag to request that a key not be released with any newer enrolled biometrics. https://developer.apple.com/documentation/security/secaccesscontrolcreateflags/2937192-biometrycurrentset

TimC: in think there is interest. we get questions about shared credential

s/I think

tony: what do we do

agl: wiht ctap 2 and mobile devices, if you know the pin can...

MMiller: like a management key

nsteele: I will respond and I can close ticket
… if we don't hear anyting

/github.com/w3c/webauthn/issues/1722//github.com/w3c/webauthn/pull/1722
… #1721 is the same thing

agl: I can respond to this

https://github.com/w3c/webauthn/issues/1720

timC: haven't made progress

tony: do we want to do this

timC: we should update text

/github.com/w3c/webauthn/issues/1716//github.com/w3c/webauthn/issues/17216

tony: this is getting looks.

MMiller: we had this transport discussion.

tony: Tim will close

<nsteele> Nick will close

<nsteele> Tim2

Minutes manually created (not a transcript), formatted by scribe.perl version 185 (Thu Dec 2 18:51:55 2021 UTC).

Diagnostics

Succeeded: s/toy/tony/

Succeeded: s/license./license, that even the less permissive license permits use of excerpts./

Succeeded: s/https://github.com/w3c/webauthn/issues/1722

Succeeded: s/https://github.com/w3c/webauthn/issues/1716

No scribenick or scribe found. Guessed: jfontana_

Maybe present: bradley, MMiller, shane, tim, TimC, tony, wendy