13:51:35 RRSAgent has joined #wpwg 13:51:35 logging to https://www.w3.org/2022/09/29-wpwg-irc 13:51:38 Meeting: Web Payments WG 13:51:40 Chair: Ian 13:51:42 Scribe: Ian 13:52:06 Agenda: https://github.com/w3c/webpayments/wiki/Agenda-20220929 13:58:14 present+ 13:58:38 agenda? 13:58:41 agenda+ TPAC debrief 13:58:44 agenda+ SPC updates 14:00:26 present+ Christian_aabye 14:00:47 benoit has joined #wpwg 14:00:47 present+ Carey_Ferro 14:01:03 present+ Steve_Cole 14:01:12 regrets+ Nick_Telford-Reed 14:01:15 present+ David_Benoit 14:01:22 cferro has joined #wpwg 14:02:32 present+ Praveena_Subrahmanyam 14:02:40 present+ Soumya_Chakrabarty 14:02:46 present+ Stephen_McGruer 14:03:29 present+ Michael_Horne 14:03:36 present+ Gregoire_Leleux 14:04:03 Gregoire has joined #wpwg 14:04:12 zakim, take up item 1 14:04:12 agendum 1 -- TPAC debrief -- taken up [from Ian] 14:04:29 -> https://github.com/w3c/webpayments/wiki/Agenda-TPAC2022 14:04:41 -> https://github.com/w3c/webpayments/wiki/Agenda-20220929 14:04:48 SameerT has joined #wpwg 14:04:52 mikehorne has joined #wpwg 14:05:34 Ian: Any thoughts to share to get started? 14:05:40 present+ Sameer_Tare 14:05:53 Carey: Fantastic TPAC, helped me get more involved. 14:06:24 Ian: How was the AV? 14:06:29 Praveena: Really good 14:07:56 [Action review] 14:07:57 Stephen to check whether the attestation is available during SPC flow 14:08:23 smcgruer_[EST]: I think the answer is "not yet" due to current WebAuthn. But passkeys will make this a thing, but without a guarantee. 14:08:37 ...we should find out whether you'll have to ask for it. 14:08:48 * Sameer to see about enhancing 3DS flow to include attestation if available in SPC context 14:09:01 q+ 14:09:05 ack SameerT 14:09:27 SameerT: We are relying on output of SPC; so we're already covered if it's just part of the usual output. 14:10:07 smcgruer_[EST]: If 3DS allows bundling of the assertion should be covered. 14:10:18 SameerT: Need to ensure size not a problem, otherwise ok 14:10:35 * Stephen to get info on priority of more icons in transaction dialog from design team 14:10:44 smcgruer_[EST]: I spoke to UX people; hoping to see this tackled in Q4. 14:11:01 * Sameer to work with the 3DS WG to write down in more detail the "non-payment transaction" use case. 14:11:26 Sameer: We haven't discussed yet, but likely to take up over next few weeks then will have a timeline 14:11:39 -> https://docs.google.com/document/d/1W6uCLSI5ZEJf35_mnUrc-PgLViLHv7ajetyiU_zXFlM/edit#heading=h.2gax5cjw9era joint meeting notes 14:12:18 q? 14:13:22 Topic: On Auth failure after authentication 14:13:51 Ian: With SPC, could one display an error before calling complete()? 14:14:07 [Review of another pay experience] 14:14:50 ChristianA has joined #wpwg 14:15:33 Ian: Could a merchant "do the right thing"? 14:15:49 smcgruer_[EST]: Good question what will happen if you call complete(fail). 14:15:59 present+ Sue_Koomen 14:16:50 Sue has joined #wpwg 14:17:16 smcgruer_[EST]: I think the concerns I heard were more about defense against malicious merchant. 14:17:37 q+ 14:17:43 ack SameerT 14:18:01 SameerT: One thing that might help is to look at sequence of steps that happens. 14:18:12 ..the merchant uses results of 3DS to send for authorization. 14:19:45 q? 14:20:44 zakim, close item 1 14:20:44 agendum 1, TPAC debrief, closed 14:20:45 I see 1 item remaining on the agenda: 14:20:45 2. SPC updates [from Ian] 14:20:47 zakim, take up item 2 14:20:47 agendum 2 -- SPC updates -- taken up [from Ian] 14:20:56 https://github.com/w3c/secure-payment-confirmation/pull/212 14:23:15 https://github.com/w3c/secure-payment-confirmation/issues/81#issuecomment-1254076174 14:23:46 smcgruer_[EST]: I was working on some SPC feature detection ideas. 14:24:02 ...today's approach is clunky. 14:24:18 ...the issue now has a proposal 14:24:37 ...there are some side issues not covered like "is spc available in a form that I want it" (e.g., use platform authenticator only) 14:24:46 ...I think we need developer input on this topic 14:25:11 Ian: Any comments on 3DS integration? 14:25:15 smcgruer_[EST]: No impact 14:25:39 praveena: Adyen had brought this up early in the pilot development. 14:25:49 ...I think it would make life easier 14:26:41 smcgruer_[EST]: Probably true that "existing user" input is not as available as "new user" 14:26:52 smcgruer_[EST]: We would do this except that we keep debating the overall shape of the API. 14:26:56 praveena: +1 14:28:42 [On getting SPC to CR] 14:28:50 Ian: TAG now satisfied, I18N now satisfied 14:30:00 Ian: Check with WG about waiting a bit longer for Webkit input before going to CR 14:30:32 q+ 14:30:58 https://github.com/w3c/secure-payment-confirmation/wiki/SPC-Candidate-Recommendation-Vision 14:31:17 ack SameerT 14:31:38 SameerT: Process question - once a feature is in CR is there a qualification process to not make breaking changes? 14:34:00 q+ 14:34:10 ack ChristianA 14:34:29 [On EMVCo process and breaking changes] 14:34:37 [And time required to respond to breaking changes] 14:36:27 present+ Rolf_Lindemann 14:36:33 Ian: Any new updates? 14:36:40 smcgruer_[EST]: We are looking at M108 android. 14:37:48 smcgruer_[EST]: We've been watching SPC traffic; saw a spike 2 weeks ago; success rate of those authentications was very high. 14:39:22 smcgruer_[EST]: Our opt-out origin trial ends end-of-year; we'll make a decision then based on partner demand. 14:40:26 smcgruer_[EST]: We did bring up create() in cross-origin iframe within webAuthn WG last week 14:40:36 ...there is ongoing discussion 14:40:56 https://github.com/w3c/webauthn/pull/1801#issuecomment-1261222538 14:41:19 Rolf: Any signals from other browser vendors re: SPC? 14:42:50 [None heard] 14:43:08 Topic: Next meeting 14:43:41 Ian: EMVCo meets then 14:44:00 13th Oct 14:44:11 I have made the request to generate https://www.w3.org/2022/09/29-wpwg-minutes.html Ian 14:44:30 Sue has left #wpwg 14:45:48 rrsagent, bye 14:45:48 I see no action items