18:57:08 RRSAgent has joined #webauthn 18:57:08 logging to https://www.w3.org/2022/06/29-webauthn-irc 18:57:10 RRSAgent, make logs Public 18:57:11 Meeting: Web Authentication WG 18:57:13 Agenda: https://lists.w3.org/Archives/Public/public-webauthn/2022Jun/0292.html 18:57:30 thanks, Wendy 19:02:43 elundberg has joined #webauthn 19:04:18 present+ 19:04:29 tony: we are scheduled for TPAC. 19:04:38 ...on agenda for Monday Sept 12. 19:04:57 ...we have join meetings for tuesday with Web payments and other groups 19:04:59 matthewmiller has joined #webauthn 19:05:12 ...on wednesday can do other work or go home. 19:06:01 ...suggest those in-person look at W3C web site. 19:06:16 wendy: some inter-group participation. 19:06:28 ...putting a lot into being a good hybrid meeting 19:06:43 nina has joined #webauthn 19:06:48 ...registration should be opening soon 19:06:59 Tons yu: Wednesday is submit your topic. 19:08:09 tony 19:08:21 s/Tons yu/Tony/ 19:09:17 present+ 19:09:23 present+ 19:09:25 thank you 19:09:33 present+ 19:09:45 agl: I can help with review if the others are busy 19:10:14 present+ agl, nadalin, andypeterson, davidturner, nina, johnbradley, elundberg, johnpascoe, martinkreichgauer, matthewmiller, sbweeden, timcappalli 19:10:34 https://github.com/w3c/webauthn/pull/1733 19:13:17 elundberg: I made sme changes for it to be more clear. 19:13:26 agl: think this is good. 19:13:32 dveditz has joined #webauthn 19:13:50 present+ 19:14:02 https://github.com/w3c/webauthn/pull/1732 19:14:14 agl: no response from Mozilla, no changes so far. 19:14:21 tony: how long should we wait? 19:14:29 agl: that comes from Akshay 19:15:05 jbradley: I am good with it. 19:15:36 ...fine to merge now, but check with Aksay 19:15:46 tony: Tim? Issues? 19:15:52 Who did you send that to at Mozilla? 19:15:54 tim: I am getting it done. 19:16:00 https://github.com/w3c/webauthn/pull/1703 19:16:08 My mic is apparently not working 19:16:20 mattM: in a good state right now, need a bit of feedback 19:16:48 ...with no objections, we can land as is 19:17:14 tony: I would like to see this in the first draft. 19:17:21 ...any issue moving forward 19:20:02 matt: will merge and follow up 19:20:11 nickS: think it is fine 19:20:53 https://github.com/w3c/webauthn/pull/1663 19:21:09 agl: still in works to some extent, but settling 19:21:23 ...at face to face questions about attestation stuff 19:21:34 ...its a large PR now 19:21:46 ...but it is significant 19:21:49 ...read it 19:22:05 tony: we will resolve everyone's comments 19:22:47 tony: aimed at first public draft. 19:23:05 ...before TPAC in late August 19:23:32 agl: we have a similar target 19:23:44 jbradley: looking at some issues we may have with Windows 19:23:55 ...we are changing things beyond extension 19:24:06 agL; working on some CTAP issues also 19:24:40 https://github.com/w3c/webauthn/pull/1576 19:25:00 nina: looking to merge this 19:26:16 tony: Matthew and shane can you look at this 19:27:59 tony: want to get this into first draft since implementd. 19:28:16 agL; want to merge it now, but if people want a read, go ahead 19:28:26 shane: no objection 19:28:38 ...I want to relook at it 19:28:50 ...I did not that and I see the implementation and I am happy 19:29:01 tony: so change status to approve 19:29:14 tony: matthew merge? 19:29:27 mattM: yes 19:31:38 https://github.com/w3c/webauthn/pull/1425 19:31:48 tony: sitll on hold, nothing new 19:31:54 https://github.com/w3c/webauthn/pull/1755 19:32:10 agl: the name of cable is hybrid 19:32:17 ...its the new name 19:32:26 ...I will look at this 19:33:36 https://github.com/w3c/webauthn/pull/1744 19:35:03 shane: I won't object to this 19:35:42 jbradely:: akshay was leaning against this 19:35:53 ...do we need another nob to move? 19:36:47 ...what this means and how to implement this may cause more confusion 19:37:14 elundberg: browser best effort may be the best we get 19:37:42 ...it is enough? 19:38:25 tim: then why to we do DPK 19:38:39 mattM: sitll value for DPK 19:39:20 shane: will be some RPs without DPK, but still might want a credential 19:39:52 ...there are a broader set of comments in GitHub; some looking for more control 19:40:46 mattM: also the point that if you want a single device credential, need to have an authentication and see value created. 19:41:24 Tim: if you don't like a security key you reject it. 19:41:35 mattM: then why is credential around? 19:46:35 ...should not go forward with this. don't see how this is different from other authenticators. 19:46:45 tony: is anyone agansit this 19:46:46 ? 19:46:58 agL: don't think this proposal is the way to go. 19:47:29 Tim: I am supportive of the idea, but concerned on this method 19:48:06 ...I would like an MDM policy 19:48:25 agl: policy could be best way to go 19:49:14 elundberg: we have added 19:49:39 ...so I am leaning against it. 19:49:47 ...but not a hard opinion either way 19:50:31 mattM: issue that continues to bug me, alternative way to approach this without new parameter 19:51:26 ...was a proposal to delete credentials, can we revive that 19:51:41 shane: worried about the user experience 19:51:55 ...should have been presented upfront 19:52:06 agl: think this is two issues 19:52:30 ...backburner the notion this will not work. 19:54:02 tony: so leave #1744 open 19:56:16 tony: https://github.com/w3c/webauthn/issues/1757 19:57:54 ...this could be forwarded to Web Authn adoption group 20:02:52 tony: does Matt want to champion this issue; 20:02:56 matt: I will make editorial note in the spec. 20:03:29 present+ suekoomen 20:03:33 chair: Nadalin, Fontana 20:03:36 rrsagent, draft minutes 20:03:36 I have made the request to generate https://www.w3.org/2022/06/29-webauthn-minutes.html wseltzer 20:08:04 Zakim, bye 20:08:04 leaving. As of this point the attendees have been Ian, Akshay, AndyPeterson, elundberg, jfontana, Nadalin, JohnBradley, JohnPascoe, sbweeden, Nina, StephenMcGruer, wseltzer, 20:08:04 Zakim has left #webauthn 20:08:07 ... nsteele, matthewmiller, dveditz, agl, ay, davidturner, davidwaite, timcappalli, Tim_Cappalli, Tony_Nadalin, Joseph_Vasterling, Dirk_Balfanz, Arnar_Birgisson, Emil_Lundberg, 20:08:07 ... John_Fontana, Armen_Anoyan, Adam_Langley, John_Bradley, Shane_Weeden, Nick_Steele, Wendy_Seltzer, Matthew_Miller, Mike_Jones, Martin_Kreichgauer, Andrew_Shikiar, selfissued, 20:08:07 ... John_Pascoe, David_Waite, Akshay_Kumar, Pamela_Dingle, martinkreichgauer, suekoomen 20:08:34 rrsagent, bye 20:08:34 I see no action items 20:08:44 RRSAgent has joined #webauthn 20:08:44 logging to https://www.w3.org/2022/06/29-webauthn-irc 20:09:12 present+=wseltzer, fontana, agl, nadalin, andypeterson, davidturner, nina, johnbradley, elundberg, johnpascoe, martinkreichgauer, matthewmiller, sbweeden, timcappalli 20:09:16 present=wseltzer, fontana, agl, nadalin, andypeterson, davidturner, nina, johnbradley, elundberg, johnpascoe, martinkreichgauer, matthewmiller, sbweeden, timcappalli 20:09:36 present+ suekoomen 20:09:40 zakim, who is here? 20:10:06 zakim, bye 20:10:13 rrsagent, bye 20:10:19 rrsagent, make logs public 20:10:21 rrsagent, bye 20:10:21 I see no action items