View source for IG Security WebConf/2019

Agendas from WoT Security TF from 2019

=== Dec 16, 2019 ===
* Meeting schedule
** No Meetings: Dec 23, Dec 30
** Tentative: Jan 6, Jan 13
* Review Minutes:
** https://www.w3.org/2019/11/18-wot-sec-minutes.html
* Review of Lifecycle discussion in Architecture
* PRs and Issues
* AOB

=== Dec 9, 2019 ===
Cancelled - meeting slot needed to finalize PRs.

=== Nov 25, 2019 ===
Cancelled - multiple conflicts.

=== Nov 18, 2019 ===
* WG Charter finalization
* Quick updates
** IETF Hackathon and Workshop - Discovery
** [https://github.com/w3c/wot/blob/master/proposals/wot-discovery.md Discovery proposal draft]
* Review Minutes
** [https://www.w3.org/2019/11/11-wot-sec-minutes.html Nov 11, 2019]
** [https://www.w3.org/2019/11/05-wot-sec-minutes.html Nov 5, 2019]
* Issues and PRs
* AOB

=== Nov 11, 2019 ===

=== Nov 5, 2019 ===
* Introductions
* Quick updates
* Review Minutes
** [https://www.w3.org/2019/09/09-wot-sec-minutes.html Sept 9, 2019] - Already approved
** [https://www.w3.org/2019/10/14-wot-sec-minutes.html Oct 14, 2019]
** [https://www.w3.org/2019/10/21-wot-sec-minutes.html Oct 21, 2019]
* Time choice
** [https://doodle.com/poll/t6uxq6uvacqt63bt Doodle]
* Publication status
* Issues and PRs
* AOB

=== Sept 9, 2019 ===
* Quick updates
* Review Minutes
** [https://www.w3.org/2019/09/02-wot-sec-minutes.html Sept 2]
* [https://github.com/w3c/wot-architecture/pull/384 Definitions PR in Architecture]
* [https://github.com/w3c/wot/pull/862 WG Charter Draft Round 2]
* Profile
* TPAC F2F Planning
* Issue tracker
* AOB

=== Sept 2, 2019 ===
* Quick updates
* Review Minutes
** [https://www.w3.org/2019/08/26-wot-sec-minutes.html Aug 26]
* Rescheduling
** [https://doodle.com/poll/uygq7wtn75syw8h2 Doodle]
** 7pm-8pm Japan Time works for everyone but Taki
* WG Charter Draft
* Issue tracker and PR review
* AOB

=== Aug 26, 2019 ===
* Quick updates
** Michael is relocating 
*** to Atlantic Canada
*** Altantic Time: Eastern - 1
* Review Minutes
** [https://www.w3.org/2019/08/05-wot-sec-minutes.html Aug 5]
* Rescheduling
** Options: Monday 6pm, 7pm JST, Tuesday 7pm, 8pm, 9pm JST
** Monday strongly preferred by Kaz and Mizushima
** Kaz to create a doodle
* Issue tracker and PR review
* AOB

=== Aug 5, 2019 ===
* Quick updates
** Meeting with Sam Weiler at IETF
* Review minutes
** [https://www.w3.org/2019/07/08-wot-sec-minutes.html July 8]
* Publication status
* Issue tracker and PR review
* TODO status
** Review https://github.com/w3c/wot-security/pull/137 - McCool
** see also below
* AOB

=== July 8, 2019 ===
* Quick Updates
** Meeting Schedule
* Review Minutes
** [https://www.w3.org/2019/06/17-wot-sec-minutes.html June 17]
** [https://www.w3.org/2019/07/01-wot-sec-minutes.html July 1]
* Publication Status
** Kaz to push through on updated Note this week
* PRs
** https://github.com/w3c/wot-architecture/pull/368
** https://github.com/w3c/wot-architecture/pull/369
* TODO
** [https://github.com/w3c/wot-security/issues/138 Add end-of-life state to Lifecycle diagram] - McCool
** [https://github.com/w3c/wot-security/issues/123 Resolve proxy/intermediary terminology choice] - McCool
** https://github.com/w3c/wot-security/issues/135 - McCool - review in main call or TF calls
** https://github.com/w3c/wot-security/issues/136 - McCool - review in main call or TF calls
* Reviews
** McCool to coordinate reviewers and review schedule
* AOB

=== June 10, 2019 ===
* Quick Updates
* PRs
** https://github.com/w3c/wot-security/pull/127
** https://github.com/w3c/wot-security/pull/128
* TO DO
** "Security and Privacy Considerations" -> "Security and Privacy Guidelines"
** Terminology issues and updates
* Review
** Feedback review
** Update to security section of Architecture document
* AOB

=== June 3, 2019 ===
Cancelled due to workshop

=== May 27, 2019 ===
Cancelled due to conflicts

=== May 20, 2019 ===
* Review of Minutes from earlier meetings
** https://www.w3.org/2019/05/06-wot-sec-minutes.html
* Quick Updates
* Reviews
* Schedule
* Name change
** "Security and Privacy Considerations" -> "Security and Privacy Guidelines"
* Issues and PRs
* AOB

=== May 6, 2019 ===
* Review of Minutes from earlier meetings
** https://www.w3.org/2019/04/29-wot-sec-minutes.html
* Quick Updates
** CTA/NIST for Workshop (declined)
* Review progress
* Updates to TD and Arch specs
** Remove direct refs to Best Practices and Testing docs
* Issues and PRs
* AOB

=== April 29, 2019 ===
* Review of Minutes from earlier meetings
** https://www.w3.org/2019/04/15-wot-sec-minutes.html
* Quick updates
** [https://www.secureworldexpo.com/industry-news/iot-security-congress NIST Security Baseline]
* Review progress
** Let's target May 8 now...
** Gives us one week to update things before May 15 CR target
* Publication schedule
** After CR in mid-May, edit Security Docs for consistency
** Updated Note published in mid-June; can update when go to REC.
** Should publish Best Practices and Testing Plan as Notes
** Want to cite "latest" version in Arch document, not dated version
** Target May 8 as meeting to have "publication resolution"
** Go to publication immediately afterwards
* Penetration testing planning
** McCool updating code and system description for Workshop demos
** System description for pen test done by May 15
** Will be travelling to IIC workshop May 17-23
** Penetration testing target: May 30
* Issues and PRs
* AOB

=== April 22, 2019 ===
Cancelled due to holiday.

=== April 15, 2019 ===
* [https://w3ctag.github.io/security-questionnaire/ New (WIP) Security Questionnaire]
* Review progress
* Review of Minutes from earlier meetings
** https://www.w3.org/2019/01/14-wot-sec-minutes.html
** https://www.w3.org/2019/02/11-wot-sec-minutes.html
** https://www.w3.org/2019/02/18-wot-sec-minutes.html
** https://www.w3.org/2019/02/25-wot-sec-minutes.html
** https://www.w3.org/2019/03/04-wot-sec-minutes.html
** https://www.w3.org/2019/03/18-wot-sec-minutes.html
** https://www.w3.org/2019/03/25-wot-sec-minutes.html
** https://www.w3.org/2019/04/01-wot-sec-minutes.html
* Penetration testing planning
** Next: McCool to write system description
* Issues and PRs
* AOB

=== April 8, 2019 ===
* CANCELLED due to AC Meeting

=== April 1, 2019 ===
* Minute review
** Deferred again, Elena can't join
* CR Transition preparations
* Implementation experience for TD
** What else can we do?
* Security scheme extensions
** Review recent update to TD
* Penetration testing
** Reschedule given change to CR dates
* Architecture and TD spec changes
** Security and Privacy Considerations
* AOB

=== Mar 25, 2019 ===
* TAG Submission review
** Security questionnaire
* Security and Privacy Considerations
** WoT Architecture
** WoT Thing Description
* Review of minutes from previous meetings
* AOB

=== Mar 18, 2019 ===
* Review of minutes from previous meetings
* CTA/NIST Questionnaire review
* Testing status, explainers, and extensions
* Security consideration in WoT Arch doc
* AOB

=== Mar 11, 2019 ===
* Review of minutes from previous meetings
* Pen Test Planning
* Docs
** Arch
** Best Practices
* Reviews
* PRs
* TD Testing
* AOB

=== Mar 4, 2019 ===
* Review of minutes from previous meetings
** Deferred again since Kaz is not available
* Pen Test Planning
* Best Practices Doc
* AOB

=== Feb 25, 2019 ===
* No (real) meeting

=== Feb 18, 2019 ===
* Review of minutes from previous meetings
** Deferred to next meeting
* External reviews
** Found one external reviewer (IIC), two W3C reviewers (Web Security)
** Question about formal requirements
* IIC/OpenFog report
* Security conferences
** See email from Dave Raggett on mailing list
* Security sections related to runtime
** Scripting API doc
** Architecture doc
** [https://github.com/w3c/wot-architecture/issues/83 Issue about "runtime" vocabulary]
* [https://github.com/w3c/wot-security-testing-plan/pull/6 PR on Testing (ITU vocabulary change)]
* Best practices
** McCool to do PR to update, get into minimally-publishable form
* AOB

=== Feb 11, 2019 ===
* Things we have to do:
# Security section of Arch and Scripting document
# TD Implementation Report - sample implementations
# Security Best Practices document
# Document reviews
# Testing experience - penetration testing
#* Focus on Intel implementations, on McCool's private network
#* When: Second week of March
# Security section of Scripting API
* Other business

=== Feb 4, 2019 ===
No meeting, Travelling.

=== Jan 28, 2019 ===
No meeting, TestFest.

=== Jan 14, 2019 ===
* Review of minutes from previous meetings
** https://www.w3.org/2019/01/07-wot-sec-minutes.html
** https://www.w3.org/2018/12/17-wot-sec-minutes.html
* [https://github.com/w3c/wot-security-testing-plan Security Testing Plan]
* [https://github.com/w3c/wot-security-best-practices Security Best Practices]
* F2F Planning
* Other

=== Jan 7, 2019 ===
* Review of minutes from previous meetings
** https://www.w3.org/2018/12/17-wot-sec-minutes.html
* F2F Planning
** Proposed sessions
** Deliverables
** Testing and Validation Goals
* PRs
* Issues
* Other