IG Security WebConf/2018

From Web of Things Interest Group
Jump to: navigation, search

Agendas for the WoT Security TF from 2018.

Dec 31, 2018 (New Year's Eve)

No meeting

Dec 24, 2018 (Christmas Eve)

No meeting

Dec 17, 2018

Dec 3, 2018

Nov 26, 2018

Nov 19, 2018

Nov 12, 2018

  • Review of minutes from previous meetings
  • Update on publication status
  • New meeting time: discuss
  • Update on pending PRs
    • Security definitions got merged... but not done...
      • Still a problem with strings vs. objects in "security"
    • Other PRs that were ready... did not get merged due to conflicts (fixed)
    • Scopes example updated: regular -> limited
  • Candidate for Scripting API security considerations section (Elena)
  • Testing

Nov 5, 2018

Oct 29, 2018

  • Cancelled, post-TPAC recovery

Oct 22, 2018

  • Online meeting cancelled, at TPAC

Oct 15, 2018

  • Review of minutes from last meeting
  • Status of W3C Note publication
  • TPAC and plugfest planning
  • Best practices document
  • Object security
    • COSE, JOSE, and OSCORE (Koster)
  • Security consideration sections
    • Thing Description (McCool)
    • Scripting API (Reshetova)
  • Action item review
  • Issue and PR review
  • Other issues

Oct 8, 2018

  • Review of minutes from last meeting
  • Status of W3C Note publication
  • Object security
    • COSE, JOSE, and OSCORE (Koster)
  • Secure multicast
  • Security consideration sections
    • Thing Description (McCool)
    • Scripting API (Reshetova)
  • Action item review
  • Issue and PR review
  • Other issues

Sept 17, 2018

Sept 10, 2018

  • Review of minutes from last meeting
  • Security and Privacy Considerations: to resolve if ready to publish
  • TD Security and Privacy Considerations
  • Online plugfest
    • Security call will be held that week as normal; before plugfest starts, technically
    • Best practices document review and testing
  • Action item review
  • Issue and PR review
  • Other issues

Sept 3, 2018

  • Review of minutes from last meeting
  • Final review of updated Security and Privacy Considerations
  • TD Security and Privacy Considerations
  • Best practice document review
  • Issue and PR review
  • Other issues

Aug 27, 2018

Aug 20, 2018

  • Guest: Xiaoru Li, Baidu
    • Reviewed IG patent policy for the record...
  • Review of minutes from last meeting
  • Extra meetings at TPAC early in the week?
  • New DTLS schemes: cert, public
  • MQTT Security (wrt DTLS security schemes)
  • W3C Permissions: application submitted
  • Other issues

Aug 13, 2018

Aug 6, 2018

  • Review of minutes from last meeting
  • W3C Permissions Workshop
  • TD Update Review
  • Testing (Fuzz testing, DTLS)
  • Best practices (brainstorming)
  • Planning: next steps
  • Other issues and PRs
  • Other business

July 30, 2018

  • Review of minutes from last meeting
  • PR 107: Document Restructuring
  • Testing plan: security section
  • TD Updates (psk and none schemes)
  • Making "security" mandatory
  • Planning: next steps
  • Other issues and PRs
  • Other business

July 23, 2018

June 25, 2018

  • Review of minutes from last meeting(s)
  • Plugfest and F2F Prep
  • Next release
  • External validation
    • IIC
    • W3C Web Security IG
  • Review other issues and PRs
  • Other business

June 11, 2018

June 4, 2018

May 28, 2018

  • Review of minutes from last meeting(s)
  • Review PRs
  • Plugfest/F2F/TPAC Preparation
    • Conflicts w/ TPAC: Linux Security Summit Europe (Oct 25-26)
  • Review issues
  • Other business

May 21, 2018

  • Review of minutes from last meeting(s)
  • Review PRs
  • Plugfest/F2F/TPAC Preparation
  • Review issues
  • Other business

May 14, 2018

  • (X) Review of minutes from last meeting(s)
  • Review PRs
    • Privacy
    • Tunneling
  • TD Security Vocabulary
  • Online Test System - Intel
  • Review issues
  • Other business

May 7, 2018

  • (X) Review of minutes from last meeting(s)
  • Review PRs
  • Review issues
  • Other business

Apr 30, 2018

  • Review of minutes from last meeting(s)
  • Events for signaling lifecycle transitions, eg destroying an object
  • Review PRs
  • Review issues
  • Other business

Apr 23, 2018

Apr 16, 2018

  • Review of minutes from last meeting(s)
  • Review topology of plugfest scenarios
  • Review updated security metadata proposal
    • merge PR if appropriate
  • Review issues and other PRs
    • Especially Jason Novak's issues

Apr 9, 2018

  • Review of minutes from last meeting(s)
  • NDSS DISS workshop paper: updates to publication version
  • Updated "security metadata" PR
  • Update master with working
  • Planning: What Next?
    • Lifecycle: overall vs. security-specific
    • Testing and validation: https://github.com/w3c/wot/pull/439
    • Industrial and enterprise use case discussion (ACLs? Roles and profiles? Root of trust? TPMs?)
    • More updates to security metadata: roles, profiles, scopes, other schemes
    • Related IETF WGs:
      • TEEP: Trusted Execution Environments Provisioning
      • SUIT: Software updates for the IoT
    • Requesting security review from W3C Security group
    • Goals for next F2F and plugfest
    • Security review of the scripting API, including metadata and errors
  • Other topics
    • Review issues and other PRs
      • Next time make sure to review Jason Novak's issues
Retrieved from "https://www.w3.org/WoT/IG/wiki/index.php?title=IG_Security_WebConf/2018&oldid=15569"