IG Security WebConf/2019

Agendas from WoT Security TF from 2019

Dec 16, 2019

• Meeting schedule
  • No Meetings: Dec 23, Dec 30
  • Tentative: Jan 6, Jan 13
• Review Minutes:
  • https://www.w3.org/2019/11/18-wot-sec-minutes.html
• Review of Lifecycle discussion in Architecture
• PRs and Issues
• AOB

Dec 9, 2019

Cancelled - meeting slot needed to finalize PRs.

Nov 25, 2019

Cancelled - multiple conflicts.

Nov 18, 2019

• WG Charter finalization
• Quick updates
  • IETF Hackathon and Workshop - Discovery
  • Discovery proposal draft
• Review Minutes
  • Nov 11, 2019
  • Nov 5, 2019
• Issues and PRs
• AOB

Nov 5, 2019

• Introductions
• Quick updates
• Review Minutes
  • Sept 9, 2019 - Already approved
  • Oct 14, 2019
  • Oct 21, 2019
• Time choice
  • Doodle
• Publication status
• Issues and PRs
• AOB

Sept 9, 2019

• Quick updates
• Review Minutes
  • Sept 2
• Definitions PR in Architecture
• WG Charter Draft Round 2
• Profile
• TPAC F2F Planning
• Issue tracker
• AOB

Sept 2, 2019

• Quick updates
• Review Minutes
  • Aug 26
• Rescheduling
  • Doodle
  • 7pm-8pm Japan Time works for everyone but Taki
• WG Charter Draft
• Issue tracker and PR review
• AOB

Aug 26, 2019

• Quick updates
  • Michael is relocating
    • to Atlantic Canada
    • Altantic Time: Eastern - 1
• Review Minutes
  • Aug 5
• Rescheduling
  • Options: Monday 6pm, 7pm JST, Tuesday 7pm, 8pm, 9pm JST
  • Monday strongly preferred by Kaz and Mizushima
  • Kaz to create a doodle
• Issue tracker and PR review
• AOB

Aug 5, 2019

• Quick updates
  • Meeting with Sam Weiler at IETF
• Review minutes
  • July 8
• Publication status
• Issue tracker and PR review
• TODO status
  • Review https://github.com/w3c/wot-security/pull/137 - McCool
  • see also below
• AOB

July 8, 2019

• Quick Updates
  • Meeting Schedule
• Review Minutes
  • June 17
  • July 1
• Publication Status
  • Kaz to push through on updated Note this week
• PRs
  • https://github.com/w3c/wot-architecture/pull/368
  • https://github.com/w3c/wot-architecture/pull/369
• TODO
  • Add end-of-life state to Lifecycle diagram - McCool
  • Resolve proxy/intermediary terminology choice - McCool
  • https://github.com/w3c/wot-security/issues/135 - McCool - review in main call or TF calls
  • https://github.com/w3c/wot-security/issues/136 - McCool - review in main call or TF calls
• Reviews
  • McCool to coordinate reviewers and review schedule
• AOB

June 10, 2019

• Quick Updates
• PRs
  • https://github.com/w3c/wot-security/pull/127
  • https://github.com/w3c/wot-security/pull/128
• TO DO
  • "Security and Privacy Considerations" -> "Security and Privacy Guidelines"
  • Terminology issues and updates
• Review
  • Feedback review
  • Update to security section of Architecture document
• AOB

June 3, 2019

Cancelled due to workshop

May 27, 2019

Cancelled due to conflicts

May 20, 2019

• Review of Minutes from earlier meetings
  • https://www.w3.org/2019/05/06-wot-sec-minutes.html
• Quick Updates
• Reviews
• Schedule
• Name change
  • "Security and Privacy Considerations" -> "Security and Privacy Guidelines"
• Issues and PRs
• AOB

May 6, 2019

• Review of Minutes from earlier meetings
  • https://www.w3.org/2019/04/29-wot-sec-minutes.html
• Quick Updates
  • CTA/NIST for Workshop (declined)
• Review progress
• Updates to TD and Arch specs
  • Remove direct refs to Best Practices and Testing docs
• Issues and PRs
• AOB

April 29, 2019

• Review of Minutes from earlier meetings
  • https://www.w3.org/2019/04/15-wot-sec-minutes.html
• Quick updates
  • NIST Security Baseline
• Review progress
  • Let's target May 8 now...
  • Gives us one week to update things before May 15 CR target
• Publication schedule
  • After CR in mid-May, edit Security Docs for consistency
  • Updated Note published in mid-June; can update when go to REC.
  • Should publish Best Practices and Testing Plan as Notes
  • Want to cite "latest" version in Arch document, not dated version
  • Target May 8 as meeting to have "publication resolution"
  • Go to publication immediately afterwards
• Penetration testing planning
  • McCool updating code and system description for Workshop demos
  • System description for pen test done by May 15
  • Will be travelling to IIC workshop May 17-23
  • Penetration testing target: May 30
• Issues and PRs
• AOB

April 22, 2019

Cancelled due to holiday.

April 15, 2019

• New (WIP) Security Questionnaire
• Review progress
• Review of Minutes from earlier meetings
  • https://www.w3.org/2019/01/14-wot-sec-minutes.html
  • https://www.w3.org/2019/02/11-wot-sec-minutes.html
  • https://www.w3.org/2019/02/18-wot-sec-minutes.html
  • https://www.w3.org/2019/02/25-wot-sec-minutes.html
  • https://www.w3.org/2019/03/04-wot-sec-minutes.html
  • https://www.w3.org/2019/03/18-wot-sec-minutes.html
  • https://www.w3.org/2019/03/25-wot-sec-minutes.html
  • https://www.w3.org/2019/04/01-wot-sec-minutes.html
• Penetration testing planning
  • Next: McCool to write system description
• Issues and PRs
• AOB

April 8, 2019

• CANCELLED due to AC Meeting

April 1, 2019

• Minute review
  • Deferred again, Elena can't join
• CR Transition preparations
• Implementation experience for TD
  • What else can we do?
• Security scheme extensions
  • Review recent update to TD
• Penetration testing
  • Reschedule given change to CR dates
• Architecture and TD spec changes
  • Security and Privacy Considerations
• AOB

Mar 25, 2019

• TAG Submission review
  • Security questionnaire
• Security and Privacy Considerations
  • WoT Architecture
  • WoT Thing Description
• Review of minutes from previous meetings
• AOB

Mar 18, 2019

• Review of minutes from previous meetings
• CTA/NIST Questionnaire review
• Testing status, explainers, and extensions
• Security consideration in WoT Arch doc
• AOB

Mar 11, 2019

• Review of minutes from previous meetings
• Pen Test Planning
• Docs
  • Arch
  • Best Practices
• Reviews
• PRs
• TD Testing
• AOB

Mar 4, 2019

• Review of minutes from previous meetings
  • Deferred again since Kaz is not available
• Pen Test Planning
• Best Practices Doc
• AOB

Feb 25, 2019

• No (real) meeting

Feb 18, 2019

• Review of minutes from previous meetings
  • Deferred to next meeting
• External reviews
  • Found one external reviewer (IIC), two W3C reviewers (Web Security)
  • Question about formal requirements
• IIC/OpenFog report
• Security conferences
  • See email from Dave Raggett on mailing list
• Security sections related to runtime
  • Scripting API doc
  • Architecture doc
  • Issue about "runtime" vocabulary
• PR on Testing (ITU vocabulary change)
• Best practices
  • McCool to do PR to update, get into minimally-publishable form
• AOB

Feb 11, 2019

• Things we have to do:

1. Security section of Arch and Scripting document
2. TD Implementation Report - sample implementations
3. Security Best Practices document
4. Document reviews
5. Testing experience - penetration testing
   • Focus on Intel implementations, on McCool's private network
   • When: Second week of March
6. Security section of Scripting API

• Other business

Feb 4, 2019

No meeting, Travelling.

Jan 28, 2019

No meeting, TestFest.

Jan 14, 2019

• Review of minutes from previous meetings
  • https://www.w3.org/2019/01/07-wot-sec-minutes.html
  • https://www.w3.org/2018/12/17-wot-sec-minutes.html
• Security Testing Plan
• Security Best Practices
• F2F Planning
• Other

Jan 7, 2019

• Review of minutes from previous meetings
  • https://www.w3.org/2018/12/17-wot-sec-minutes.html
• F2F Planning
  • Proposed sessions
  • Deliverables
  • Testing and Validation Goals
• PRs
• Issues
• Other