14:09:15 RRSAgent has joined #ua-impactful-changes 14:09:15 logging to https://www.w3.org/2022/09/14-ua-impactful-changes-irc 14:09:17 Zakim has joined #ua-impactful-changes 14:14:26 Meeting: Breaking the web responsibly - TPAC 2022 breakout 14:14:28 Chair: Greg_Whitworth 14:14:30 Agenda: https://www.w3.org/events/meetings/212ac825-4b7a-42db-a903-96e452d8ed93#agenda 14:14:32 RRSAgent, make log public 14:14:34 RRSAgent, this meeting spans midnight 14:18:52 RRSAgent, stay 14:18:54 Zakim, stay 14:18:54 I don't understand 'stay', dom 15:14:58 dom has joined #ua-impactful-changes 16:13:21 agenda+ breakout 18:15:49 dom has joined #ua-impactful-changes 20:10:49 howard-e has joined #ua-impactful-changes 20:10:54 howard-e has left #ua-impactful-changes 20:15:05 dom has joined #ua-impactful-changes 20:21:12 gregwhitworth has joined #ua-impactful-changes 20:30:10 dom has joined #ua-impactful-changes 20:30:39 jrosewell has joined #ua-impactful-changes 20:30:41 heycam has joined #ua-impactful-changes 20:30:41 Guest85 has joined #ua-impactful-changes 20:30:43 rego_ has joined #ua-impactful-changes 20:30:46 Orphis has joined #ua-impactful-changes 20:30:59 JakeA has joined #ua-impactful-changes 20:31:05 present+ 20:31:26 present+ 20:31:31 karlcow has joined #ua-impactful-changes 20:31:37 present+ 20:31:39 igarashi has joined #ua-impactful-changes 20:31:57 present+ 20:32:04 jamesn has joined #ua-impactful-changes 20:32:19 hober has joined #ua-impactful-changes 20:32:21 Travis has joined #ua-impactful-changes 20:32:23 gsnedders2 has joined #ua-impactful-changes 20:32:27 present+ 20:32:29 👋 20:32:31 present+ 20:33:44 present+ 20:34:13 present+ 20:34:27 present+ 20:35:29 howard-e has joined #ua-impactful-changes 20:35:30 tantek has joined #ua-impactful-changes 20:36:04 yonet has joined #ua-impactful-changes 20:37:23 ACL? Access control list? But that doesn't make sense in context? 20:37:36 prushforth has joined #ua-impactful-changes 20:38:39 scribe+ 20:38:43 greg: Principles of a responsible rollout 20:38:59 greg: potential impact of breaking change 20:39:03 hjrchung has joined #ua-impactful-changes 20:39:12 greg: communication and rollout strategy 20:42:52 jyasskin has joined #ua-impactful-changes 20:42:57 nolanlawson has joined #ua-impactful-changes 20:43:56 greg: Desire for Reporting API. 20:44:19 greg: Standards Process should be improved. 20:44:27 gsnedders_irc has joined #ua-impactful-changes 20:44:40 greg: Comms and Rollout timeline. to broadly communicate. 20:44:43 q? 20:44:44 present+ 20:44:52 scribe: travis 20:45:09 present+ 20:45:18 present+ 20:45:18 ben: in Chrome, enterprise team has also struggled. We have a process to surface risky deprecations from enterprise... 20:45:21 present+ 20:45:36 .. we require deprecated / interventions can be disabled through enterprise policy. 20:45:42 present+ 20:45:43 gregwhitworth: It helps and doesn't help... 20:45:57 q+ 20:46:09 .. sometimes only one enterprise customer won't turn on the policy--and that causes the world to end. 20:46:18 .. they just expect their stuff to work. 20:46:24 rbyers has joined #ua-impactful-changes 20:47:07 yoav has joined #ua-impactful-changes 20:47:13 ack jrosewell 20:47:16 .. "salesforce breaks" is what customer sees. 20:47:31 jrosewell: Thanks Greg. ❤️salesforce. 20:47:34 dlibby has joined #ua-impactful-changes 20:47:39 .. but there's a lot of smaller orgs out there too. 20:48:00 .. I'm an example of one such organization 20:48:12 .. we don't see these breaking changes 20:48:20 Tom has joined #ua-impactful-changes 20:48:32 .. nature of specifications, changes aren't written down, no rigor of W3C process applied. 20:48:52 .. have inconsistencies in how the behavior varies between UAs. 20:49:06 ayui has joined #ua-impactful-changes 20:49:18 .. changes pile up. Could be anti[..]. I think this is one of the most significannt 20:49:31 .. sessions. Thanks for listening. 20:49:39 q? 20:49:53 q+ 20:49:59 q+ 20:50:19 yoav: speaking of "hard to watch everything on blink-dev" 20:50:37 .. would it be helpful to have a deprecataion-dev list? 20:51:14 wanderview has joined #ua-impactful-changes 20:51:15 gregwhitworth: Chromium-only? Would love to get all vendors on board. 20:51:27 q? 20:51:51 .. need time to go gather info on deprecation. 20:51:52 ack yoav 20:52:00 yoav: so you are looking for a centralized place for dialog? 20:52:50 q+ 20:52:50 blink-dev is an example of the "tax" that browser engineers place on the rest of the eco-system. It's "byzantine" for the wider eco-system participants. 20:53:01 gregwhitworth: yep, centralized place. Maybe a place to link off to the speicifc place to have the discusion. 20:53:01 ack rbyers 20:53:19 heycam has joined #ua-impactful-changes 20:53:21 rbyers: From Salesforce, are the problems you've seen from intentional changes or just bugs? 20:53:46 gregwhitworth: intentional changes (cites performance issue noted in slides) 20:53:51 .. but had nothing to do with standards themselves. 20:54:28 .. so would be nice allow the venue an opportunity to find NDA relationships with others to investigate. 20:55:04 rbyers: there are often a set of changes in where 99 bugs might be "not expected to break" but where one does... 20:55:35 q+ 20:55:36 benmorss has joined #ua-impactful-changes 20:55:44 ack wanderview 20:55:47 s/ben/wanderview 20:56:16 q+ 20:56:23 q+ to ask about version 100 communication operation if it was useful. 20:56:23 wanderview: re: central place... challenge is that only chromium is bringing work? May not be as engine-diversified. 20:56:26 q- 20:56:26 q- 20:56:28 qq+ 20:56:36 .. you'd have to drum-up support from others. 20:56:37 q+ 20:57:08 q+ 20:57:11 hober: Re: question of TAG taking this up... selfishly suggesting: no. We're overloaded already. 20:57:40 .. for TAG review, it's driven by the CG / WG when they think they are ready (and not otherwise) 20:58:04 Ben_Morss has joined #ua-impactful-changes 20:58:13 ack hober 20:58:13 hober, you wanted to react to wanderview 20:58:13 gregwhitworth: would Apple be interested in helping with an impact assessment if it came up in such a group? 20:58:18 hober: I don't hate the idea ;) 20:58:21 ack karlcow 20:58:21 karlcow, you wanted to ask about version 100 communication operation if it was useful. 20:58:44 karlcow: Are you looking for long-time in advance notifications? 20:59:02 gregwhitworth: I don't think we'll get 100% of people prepared (regardless of timeline) 20:59:10 How does one join this queue of questioners? 20:59:34 .. I'm lucky to have connections to browser vendors... but how do we allow others to get this communications. 20:59:36 type "q+" 20:59:38 thx 20:59:41 q+ 20:59:46 q+ 20:59:48 ooo 20:59:48 .. note: the big ones have been really well communicated. 20:59:58 ack rbyers 21:00:42 rbyers: happy to see you mention reporting API. Didn't think Reporting API would scale. Chrome use counters are a proxy. 21:00:48 .. hope was to automate more of this. 21:01:09 lgombos__ has joined #ua-impactful-changes 21:01:14 .. mentioned a dashboard... do you have what you need from Chromium perspective? 21:01:23 gregwhitworth: yes! And that's working for us. 21:01:34 s/Didn't think Reporting API/Didn't think threat assesments/ 21:01:44 .. using that info (and Canary builds to test). 21:02:32 .. getting data from customers is slow turnaround 21:02:47 q+ 21:02:59 rbyers: having a dashboard to be able to see this early and regularly. 21:03:16 .. having tools to help makes it more scalable 21:03:23 ack wanderview 21:03:41 wanderview: Another idea: a TaskForce to gate before launch.. but another idea: a post-mortem 21:04:02 .. breaks aren't driven by standards changes, but having a review to understand how a decision was made... 21:04:09 There is a disconnect between the pace of change in the browser world and some web site operators. How about not breaking things in releases unless both users and web site operators agree? 21:04:10 .. at Google, post-mortems are helpful for learning. 21:04:20 .. not sure it would work in multi-stakeholder scenario though. 21:04:21 ack Ben_Morss 21:04:24 q? 21:04:59 Ben_Morss: Have been working on removing lesser-used storage things. Want to know if they are used, but don't know how! 21:05:11 .. want to be able to find the right sites, talk to the right people. 21:05:31 ack heycam 21:05:33 .. want to find a way to make this available to other companies too (not just browser vendors, etc.) 21:05:48 heycam: Lots of different kinds of changes that can break. 21:05:58 .. at least for the one driven by spec changes. 21:06:14 .. you might be asking for a process in the WG to survace these things. 21:06:36 .. when groups make changes to specs, it would be nice to tag or collect them into some centralized place. 21:07:02 dom__ has joined #ua-impactful-changes 21:07:04 .. for other cases (performance of accessibility issue), it might be very difficult for those making the changes to realized (in advance) that it would be a problem. 21:07:11 q+ 21:07:32 gregwhitworth: understand that [potentially] every feature could break something... 21:07:52 q? 21:08:50 .. may not be a standards change, but there is a priori knowledge that it will have an impact. Some of these may need NDA discussions...? 21:09:02 .. not sure how we reach all companies! 21:09:16 ack miketaylr 21:09:37 miketaylr: if you had a deprecation policy magic wand... what is the minimum time you'd want to see? 21:10:07 gregwhitworth: nolanlawson how long does it take to do a code scan? 21:10:19 .. about a few days. That might be a minimum 21:10:20 q+ to ask about nightly browser versions and what is missing there to help? 21:10:38 .. to fix, it might take months. 21:10:52 .. six months to a year. 21:11:08 miketaylr: restate: so 6 to 12 months? 21:11:19 gregwhitworth: yes, to ensure all of salesforce components are patched. 21:11:30 ack Orphis 21:11:49 dbaron has joined #ua-impactful-changes 21:11:55 Orphis: Re: collecting info from WGs... an issue is that spec is updated, but UA don't ship the changes until much later. 21:12:08 .. so telling people based on the spec change, may not be as effective. 21:12:12 q+ 21:12:40 gregwhitworth: More and more, my brain is thinking of reporting API automation... having a centrailzed status site. 21:13:14 .. site could surface companies (who want to participate) that may be broken...?? 21:13:25 .. just brainstorming 21:13:59 .. again tough when a component of a site is broken, and it implicates the larger site. 21:14:08 +1 to it looks like "Salesforce" broke - customers expect their vendors to protect them from these issues 21:14:39 .. right now, every product need to go do their own setup. Don't know how to solve that. 21:14:43 ack karlcow 21:14:43 karlcow, you wanted to ask about nightly browser versions and what is missing there to help? 21:15:14 karlcow: did you experience anything missing with reporting api or testing? 21:15:38 q+ 21:15:59 q+ 21:15:59 .. we have so many permutations/combinations of salesforce, that's it's really hard. 21:16:14 ack yoav 21:16:41 yoav: 1) announcements should be driven by implementers, not WGs. 21:17:08 .. 2) Reporting API for deprecation reporting. Spec isn't in a great shape. Chromium only? 21:17:56 q+ to note telementry systems as scale for the web at large would be 💯 21:18:01 ack rbyers 21:18:11 q+ 21:18:52 rbyers: if Chrome is causing pain, we don't like that. Have added process, etc. Conclusion is that best source of data is experimentation (e.g., 1% of end users) 21:19:11 .. we hear that 50/50 of enterprises don't have telemetry turned on. 21:19:27 .. I can tell a use-counter is hit, but can't measure the impact. 21:19:47 .. if it's below a threshold we assume it's not impactful. But it could be a user check-out flow. 21:20:05 .. would love to see a API that indicates catastrophic failures has occured. 21:20:26 .. then we could get more insight into what impact. 21:20:45 gregwhitworth: maybe moving forward? But "upgrading" the Salesforce app won't catch everything. 21:21:22 .. might have to summarize some of the impact. 21:21:42 q+ 21:22:04 .. inverse of reporting. You report to browsers. 21:22:27 .. we don't think unhandled exceptions are an indicator of failure. but maybe not? 21:22:55 ack wanderview 21:22:59 q-- 21:23:06 q- later 21:23:14 wanderview: When trying to improve on this... when give more folks more time, it translates to less urgency. 21:23:36 .. need to find a balance. 21:24:10 gregwhitworth: I value a task force for this because getting on a call allows me to convey urgency in person. 21:24:41 ack Travis 21:24:41 Travis, you wanted to note telementry systems as scale for the web at large would be 💯 21:25:02 Travis: we could invest a lot more in general in various kinds of telemetry systems to heal and understand what's going on 21:25:08 q? 21:25:35 Travis: I deal with internal customers just trying to figure out what it is so slow and there are things in the tools but can't see them in the labs nor are they hitting them but it's in the customer's machine 21:25:43 ack jrosewell 21:26:20 jrosewell: from econ perspective, a business has to decide whether or not to invest in the web platform... they may chose not to invest (or use it to distribute an app) 21:26:33 .. have heard some interesting ideas. 21:26:41 .. want to preserve the stability of the web. 21:27:06 .. from a business and econ perspecive. Feel this is the most important issue facing the web at the moment. 21:27:49 gregwhitworth: envisioning a TF that meets 1x per quarter... who is interested in helping figure this out? 21:28:14 .. yoav, Travis? others? 21:28:29 I'd like to be included if scope is also including the cadence of change and aligning to pace of user / business change. 21:28:44 👍 21:29:13 gregwhitworth: want to start putting together a doc of potential solutions. 21:30:55 .. thank you all for your time! 21:30:55 .. we'll stay in touch! 21:31:11 zakim, end the meeting 21:31:11 As of this point the attendees have been JakeA, Guest, miketaylr, igarashi, hober, Travis, jrosewell, karlcow, rego_, tantek, prushforth, Orphis, hjrchung, jyasskin 21:31:13 howard-e has left #ua-impactful-changes 21:31:14 RRSAgent, please draft minutes 21:31:14 I have made the request to generate https://www.w3.org/2022/09/14-ua-impactful-changes-minutes.html Zakim 21:31:16 I am happy to have been of service, Travis; please remember to excuse RRSAgent. Goodbye 21:31:20 Zakim has left #ua-impactful-changes 21:31:25 RRSAgent, make logs public 21:52:59 dom has joined #ua-impactful-changes 21:58:48 tantek has joined #ua-impactful-changes 22:00:47 rego_ has joined #ua-impactful-changes 22:01:21 rego_ has joined #ua-impactful-changes 22:01:25 gsnedders_irc has joined #ua-impactful-changes 22:02:06 gsnedders_irc has left #ua-impactful-changes 22:02:18 rbyers has left #ua-impactful-changes 22:02:57 Guest85 has joined #ua-impactful-changes 22:10:39 jyasskin has left #ua-impactful-changes 22:37:49 jamesn has left #ua-impactful-changes 23:22:25 dom has joined #ua-impactful-changes 23:35:33 miketaylr has joined #ua-impactful-changes 23:39:26 tantek has joined #ua-impactful-changes 23:59:34 tantek_ has joined #ua-impactful-changes 01:28:56 tantek has joined #ua-impactful-changes 15:28:57 rego_ has joined #ua-impactful-changes 16:02:58 howard-e has joined #ua-impactful-changes 16:05:37 tantek has joined #ua-impactful-changes 16:50:45 howard-e has joined #ua-impactful-changes 17:23:59 howard-e has joined #ua-impactful-changes 17:59:33 howard-e has joined #ua-impactful-changes 18:41:37 miketaylr has joined #ua-impactful-changes 18:51:18 tante has joined #ua-impactful-changes 19:27:51 howard-e has joined #ua-impactful-changes 19:51:12 howard-e has joined #ua-impactful-changes 20:08:43 howard-e has joined #ua-impactful-changes 20:27:23 miketaylr has joined #ua-impactful-changes 20:27:29 howard-e has joined #ua-impactful-changes 20:33:28 tantek has joined #ua-impactful-changes 21:14:55 dom has joined #ua-impactful-changes 21:21:55 miketaylr has joined #ua-impactful-changes 22:02:57 RRSAgent, bye 22:02:57 I see no action items