01:05:23 RRSAgent has joined #dap 01:05:23 logging to http://www.w3.org/2012/03/21-dap-irc 01:05:32 RRSAgent, this meeting spans midnight 01:05:36 dsr has joined #dap 01:06:00 Deepanshu has joined #dap 01:06:09 ping 01:06:17 Present+ Deepanshu_Gautam 01:06:18 shan has joined #dap 01:06:19 RRSAgent, pointer? 01:06:19 See http://www.w3.org/2012/03/21-dap-irc#T01-06-19 01:06:30 RRSAgent, make minutes public 01:06:30 I'm logging. I don't understand 'make minutes public', darobin. Try /msg RRSAgent help 01:06:36 xingxin has joined #DAP 01:06:37 RRSAgent, make logs public 01:07:09 bryan_sullivan has joined #dap 01:07:16 Present+ dsr 01:07:17 Agenda: http://www.w3.org/2009/dap/wiki/F2F_Agenda_20-22_March_2012,_Shenzhen,_China 01:07:19 Samarth has joined #dap 01:07:31 Chair: Robin_Berjon, Frederick_Hirsch 01:07:33 present+ Bryan_Sullivan 01:07:33 Jungkee has joined #dap 01:07:40 Present+ Robin_Berjon, Frederick_Hirsch 01:07:40 Present+ Wonsuk_Lee 01:07:42 gao has joined #dap 01:07:46 Stephan_Steglich has joined #DAP 01:07:59 Present+ Jungkee 01:08:11 rrsagent, generate minutes 01:08:11 I have made the request to generate http://www.w3.org/2012/03/21-dap-minutes.html fjh 01:08:53 Present+ Soonbo_Han 01:08:54 aizu has joined #dap 01:08:54 gbillock has joined #dap 01:09:12 OliverD has joined #dap 01:09:29 Claes has joined #dap 01:09:32 zakim, this will be dap 01:09:33 Present+ Cathy_Chan 01:09:56 Present+ Claes_Nilsson 01:10:58 ray has joined #dap 01:11:04 present+ Stephan_Steglich 01:12:00 Scribe: Josh_Soref 01:12:01 Present+ Youngsun_Ryu 01:12:29 Topic: Media Capture 01:12:39 rrsagent, generate minutes 01:12:39 I have made the request to generate http://www.w3.org/2012/03/21-dap-minutes.html fjh 01:12:44 http://dev.w3.org/2011/webrtc/editor/getusermedia.html 01:13:07 http://www.w3.org/TR/capture-scenarios/ 01:13:49 http://www.w3.org/TR/html-media-capture/ 01:13:53 Meeting: DAP F2F Day 2 01:13:59 rrsagent, generate minutes 01:13:59 I have made the request to generate http://www.w3.org/2012/03/21-dap-minutes.html fjh 01:15:02 http://dvcs.w3.org/hg/dap/raw-file/tip/media-stream-capture/scenarios.html 01:17:44 gao has joined #dap 01:17:52 we will start with taking a look at MediaStream Capture Scenarios 01:18:11 then getusermedia, then html media capture 01:18:58 Bo_Chen has joined #dap 01:19:20 [ Bryan projects the MediaStream Capture Scenarios ] 01:19:41 Yuan has joined #dap 01:20:52 Darobin: Scenario 1 is photo upload 01:21:17 Bryan: I reviewed this document, and it's pretty good 01:21:59 richt has joined #dap 01:22:07 ... If we focus on the specific capabilities described in this document 01:22:12 Qiuling has joined #DAP 01:22:21 I'm in the bridge, but I can't hear anything. 01:22:29 ... I think we can go forward pretty quickly 01:22:33 dsr has joined #dap 01:22:34 Deepanshu, Could you open the bridge? 01:22:39 Present+ Rich_Tibbett 01:23:20 Present+ Oliver_Don 01:24:43 Fjh: this document is for the joint WebRTC. + DAP Task Force 01:25:11 ... The "Media Capture TF" 01:25:41 shunan has joined #dap 01:26:06 Fjh: WebRTC is working on streaming 01:26:36 ... This document was initially created to focus on DAP scenarios 01:27:16 Bryan: The design section (#5) 01:27:29 ... We'll need to make some decisions 01:28:07 ... Some of the items cover dependencies to HTML5 01:28:53 I'm in. Thanks:) 01:28:58 Darobin: Using the issues in the document to drive discussion seems to be the way to go 01:30:03 s/I'm in. Thanks:)// 01:30:05 Ok, I did. 01:30:57 s/Ok, I did.// 01:31:02 Bryan: there are levels of access that are granted 01:31:24 ... Initially you can't see anything 01:31:41 Richt: there's a proposal from Voxio 01:31:48 ... For capabilities 01:32:19 s/Voxio/Voxeo/ 01:32:24 ... Which is going to make fingerprinting too easy 01:33:10 Capabilities API proposal: http://lists.w3.org/Archives/Public/public-webrtc/2012Jan/0041.html 01:33:22 fjh: there appears to be a concern of fingerprinting related to the capability document being discussed in the task force 01:33:30 fjh: this is a concern 01:33:51 Darobin: we have serious concerns about the capabilities document and its implications on privacy 01:34:00 Device selection and capabilities discovery/setting are privacy-sensitive functions - as long as the user is in control of the initial access permission, I think those concerns are mitigated. 01:34:03 nwidell has joined #dap 01:34:05 fjh: what is the source of requirements for the capabilities API and document 01:36:04 darobin: capabilities API should not be exposed to untrusted sources 01:36:35 Darobin: so the WebRTC starting point is where DAP was two years ago? 01:36:43 Josh_Soref: yes 01:37:46 Richt: it's best to start from nothing and expose as little as possible, slowly adding 01:37:48 .. 01:38:00 s/..// 01:38:23 discussing 5.1.2 Issues related to privacy 01:38:53 Bryan: it's better to have the UA ask the user if it wants to expose cameras 01:38:54 WU has joined #DAP 01:38:57 mindong has joined #dap 01:39:10 ... And once you do, then you can provide some information 01:39:26 issue: capabilities API compatibility with web privacy and security, assuming untrusted, fingerprinting risk 01:39:27 Created ISSUE-125 - Capabilities API compatibility with web privacy and security, assuming untrusted, fingerprinting risk ; please complete additional details at http://www.w3.org/2009/dap/track/issues/125/edit . 01:39:36 ... If we recommend that there's a step by step process 01:39:58 Richt: I think that's a given 01:40:25 ... We have a build that has this, it's in Opera Mobile 12 01:40:26 .. 01:40:35 s/..// 01:40:43 Stephan_Steglich has left #DAP 01:40:47 ... And in a labs desktop build 01:41:09 ... The UI problem is understood by all browser vendors 01:41:19 ... It's a hard problem 01:41:27 fyi: http://dev.opera.com/articles/view/getusermedia-access-camera-privacy-ui/ 01:41:56 Bryan: I read the API and scenarios document at the same time 01:42:21 ... And thought about how we discussed pickers 01:42:40 Fjh: let's look at the conference call scenario 01:42:56 [ fjh reads section 2.5 ] 01:44:28 Fjh: it's talking about automatically selecting video based on who's speaking 01:44:55 Stephan_Steglich has joined #DAP 01:44:55 Josh_Soref: this is quite doable, Zakim can already tell us who's making noise 01:45:19 ... Selecting the video is a logical extension 01:45:56 Fjh: she (scribe) does what Josh does, pausing / rewinding 01:46:25 ... It would be interesting to analyze this from a privacy perspective 01:46:53 ... This document attempts to outline the capabilities needed to implement this 01:47:05 Most of this is app-specific and has no impact on the API AFAICT. 01:47:10 Jack has joined #dap 01:47:17 ... There's a whole bunch of stuff in this use case 01:48:24 Bryan: obviously when she receives the streams, she could save / record / etc. 01:48:58 Fjh: Harold sent an email to the list explaining that Streaming isn't so simple 01:49:56 ... The capabilities document is not this document, but it isn't documented outside the TF 01:50:35 s/documented/publicised/ 01:51:34 [ Preview ] 01:51:53 Bryan: I just reviewed the documents 01:52:03 ... I haven't sent comments yet 01:52:38 Thanks to the task force and Travis for a great job with the scenarios document 01:52:53 the DAP WG should review and comment on the issues, preferably on the task force mailing list 01:53:23 [ Pre-Processing ] 01:53:53 Richt: I have a demo 01:55:29 ... This issue quick demo 01:55:39 ... Nothing normative 01:56:21 [ getUserMedia ] 01:56:57 Richt: all browsers are experimenting with UIs 01:57:05 I have some comments I will send to the list. Overall I think the document is a useful overview of the capabilities/issues and if we focus on key capabilities the API can be very useful, without being initially too complex. 01:57:12 mindong_ has joined #dap 01:57:41 ... Mozilla demonstrated their UI, and it was very similar to our's 01:58:04 "hair check" - show still from camera in ok dialog, so you can decide on permission including this information in the decision 01:58:37 Webcam Toy demo: http://neave.com/webcam/html5/ 01:58:45 ... Although they included a "hair check" - a preview to see if your hair is out if place 01:59:04 e.g. re Pre-processing (monitoring of the input signal for various purposes, e.g. audio end-pointing, volume leveling/AGC, face/gesture recognition) - this is key to many of the use cases and usability of apps. Initially it should include boolean options (capture auto-start/pause and AGC). 01:59:12 ... The first visit to the page requests permission 01:59:31 ... And we're making permissions persistent 01:59:37 ... Per domain 01:59:55 input level events (e.g. threshold passing) or some realtime-updated attribute (input signal level) are very useful as well but perhaps advanced capabilities that can be deferred. 02:00:17 ... We're looking into domains that have user generated content 02:00:45 [ demo of live post-processing ] 02:01:33 Jack has joined #dap 02:03:43 Darobin: capturing a video from canvas will give you camera quality from 5 years ago 02:04:09 ... You want to use canvas as a view-finder 02:04:37 ... And capture from the underlying stream 02:04:57 ... We need something similar for audio 02:05:15 ... There are two apiece proposals 02:05:54 s/apiece/APIs/ 02:06:21 shows capture of video frame and post--processing on canvas, also ability to capture as photo 02:07:36 richt: face recognition demo - recognize specific face and add mustache automatically 02:11:03 I was thinking about platform support to find faces and extract video for them for use in conferencing apps. 02:12:25 * 9-something 02:12:46 bryan and rich note that simple api appropriate, as javascript and current standards can be used for this work, hardware should evolve to enable faster javascript processing for face recognition, robin notes certain opencl hardware should enable better performance as well 02:12:57 Do you need me to check his room number ? 02:14:46 ... The first visit to the page requests permission 02:14:46 ... And we're making permissions persistent 02:14:46 Darobin: capturing a video from canvas will give you camera quality from 5 years ago 02:14:46 ... You want to use canvas as a view-finder 02:15:17 s/Do you need me to check his room number ?// 02:15:57 ... And capture from the underlying stream 02:15:57 ... We need something similar for audio 02:15:57 ... There are two apiece proposals 02:15:57 Dsr: for the conferencing case 02:17:22 Apps may need to know and set the image capture options, so the section on Capture method selection is important (e.g. determining if the camera/device can capture RAW format for HDR postprocessing, or only JPEG), and to set the options via MediaStreamOptions) 02:17:34 ... Facial recognition? 02:17:58 ... Can you do that? 02:17:58 Richt: we have a demo of putting a mustache on people 02:17:58 Darobin: Mozilla had a demo, they cheated by looking at shirt color 02:17:58 Darobin: would you have been helped by Simd or OpenCL? 02:18:33 [ Scribe was disconnected ] 02:18:50 The options described in "Format detection" are important to reach consensus on, to support that capability-awareness for apps. 02:39:17 aizu has joined #dap 02:43:30 Topic: WoPhone OS 02:44:16 a12u has joined #dap 02:45:14 Qiuling has joined #DAP 02:46:18 Wonsuk has joined #dap 02:46:50 ping 02:46:53 s/ping// 02:48:17 [ Jing_Wu presents WoPhone OS - China Unicom ] 02:48:32 shunan has joined #dap 02:49:12 Jing_Wu: questions? 02:49:36 Richt: how do you run your Web applications? 02:49:38 . 02:49:49 s/.// 02:50:14 ... Are web applications trusted? 02:50:27 gbillock has joined #dap 02:50:31 ... Do you install with trust? 02:51:05 Jing_Wu: I think we're going with the installed model 02:51:52 http://www.w3.org/community/coremob/ 02:52:05 Darobin: The Core Mobile Platform CG is looking into which APIs should be supported first 02:52:08 fjh: thanks for presentation on WoPhone; questions regarding status of DAP specs should be discussed as part of the DAP F2F agenda, so that shouldhelp 02:52:14 s/shouldhelp/should help/ 02:52:37 fjh: if you have any remaining questions please ask tomorrow during the F2F 02:52:57 ... We have data on the most commonly installed applications for most platforms 02:53:26 ... We're going to define a level 0 and a level 1 02:54:10 Darobin: thanks 02:54:38 RB: in the CoreMob CG we will have level 0 which gives us a large majority of the most popular applications, and level 1 which gives us all of them 02:54:47 ... you are all encouraged to join 02:54:58 Topic: WebIntents Demonstration 02:55:21 Derek has joined #dap 02:55:29 gao has joined #dap 02:55:37 [ Class presenting ]] 02:55:57 s/]// 02:56:01 c/Class/Claes/ 02:58:28 s/Class/Claes/ 02:58:44 s!c/Class/Claes/!! 03:00:43 Claes: the client page sends postMessage commands 03:01:21 ... And the service uses UPnP to talk to the light 03:01:46 question: ack messages from the light ? answer is yes 03:02:46 Richt: is the message from the client a well known format? 03:04:20 Claes: it's speaking JSON and the service converts that to UPnP 03:04:44 ... Abstracting away the UPnP 03:05:05 gao has joined #dap 03:05:18 ... So you could speak to some non-UPnP thing 03:06:11 Richt: Could I use this to talk to my TV? 03:06:21 Claes: yes 03:06:49 Cathy: can you do UPnP eventing? 03:07:05 Claes: yes 03:07:54 Bryan: so do you have some native code? 03:08:10 Claes: yes 03:08:43 Bryan: can you do it in pure javascript! 03:09:06 Jack has joined #dap 03:09:09 q+ to talk about multicast discovery as restricted api 03:09:45 Claes: no 03:10:04 s/!/?/ 03:10:19 q? 03:10:31 fjh has joined #dap 03:10:34 Richt: it looks like this needs standardization 03:11:04 ... And integration with the Intents specification 03:11:42 ... We need a way to reach an address 03:11:49 http://people.opera.com/richt/release/specs/discovery/Overview.html -> Opera's Discovery Proposal 03:11:52 q? 03:12:01 Zakim has joined #dap 03:12:06 q+ dsr 03:12:22 ... And then you could speak to it directly 03:12:56 Bryan: could you do this with an internal web server? 03:13:27 Claes: of course, but we consider this more efficient 03:13:53 ack dsr 03:14:25 Dsr: a generic mechanism allows access to Bluetooth, Zigby, UPnP /ZeroConf 03:15:10 s/Zigby/Zigbee 03:15:11 Richt: why not allow low level access? 03:15:49 Dsr: do you want access to packet sniffing? 03:17:01 Richt: of course not 03:17:51 Josh_Soref: we decided yesterday that there would be a WebIntents compendium for UPnP 03:18:33 ... We could have similar for Bluetooth and others 03:18:56 Dsr: which forum for follow up? 03:19:12 Richt: WebIntents 03:20:26 Topic: Unknown 03:21:15 Won_Suk: tomorrow we'll talk about Tizen web API 03:21:44 Fjh: can we talk about html medi capture? 03:21:58 hints?? 03:22:29 s/medi/media/ 03:22:55 Darobin: Mozilla has implemented their own thing 03:23:00 dsr noted earlier that restricted API for multicast might be useful APIs 03:23:10 s/medi /media / 03:24:10 ... We noted that whomever implements first gets to pick names 03:25:22 ACTION: Robin to kill Media Capture API 03:25:23 Created ACTION-517 - Kill Media Capture API [on Robin Berjon - due 2012-03-28]. 03:27:06 i/can we/Topic: HTML Media Capture/ 03:29:22 Topic: Device orientation feedback to Geolocation.w3.org WG 03:30:04 [ Bryan presents dzung team's email ] 03:30:20 q+ to ask about QoI 03:30:59 s/team/tran 03:31:21 Re Sensor API feedback to GeoLoc (http://lists.w3.org/Archives/Public/public-device-apis/2012Mar/0097.html) 03:31:58 We need ability to integrate events from sensors to prevent event overload and processing overhead of doing this in Javascript. 03:32:10 q? 03:32:14 q+ 03:32:25 q+ fjh 03:32:40 Some simple type of controls would be IMO essential for an effective sensor API. 03:33:23 Fjh: part of this thread was impact on battery life and whether sensor is on it 03:33:33 ... But this seems implementation dependent 03:34:21 Bryan: for the part we give to the geolocation WG 03:34:28 ... What's missing 03:35:27 ack Josh_Soref 03:35:27 Josh_Soref, you wanted to ask about QoI 03:35:33 ack fjh 03:35:55 ... If an implementer is firing events into the application, isn't that more expensive than filtering earlier 03:36:20 josh_soref: yes, want browers to filter earlier, but more work, simpler to pass what is from OS 03:36:42 josh_soref: react to feeback as approach is often taken 03:37:29 josh_soref: app asks for something, implemented, then discover getting too much information then ask for simpler API 03:37:46 ... analogy to drown then ask for less, so point is to start with less in API, not more 03:38:30 ... don't micromanage a firehose 03:39:46 Richt: the android system lets you manage flow by application class 03:40:14 ... Is sensors a wolf in sheep's clothing? 03:40:37 Darobin: and are we losing sense of security 03:41:03 The Sensors API is simply a rebranding of Systems Information API without addressing the problems of that approach. 03:41:06 Fjh: there was a request for generic API 03:41:19 i.e. losing focus on use cases for the individual sensors. 03:41:25 that enabled extension to new as yet unidentified sensors 03:41:41 ... So you have an api for when you don't know how it will be used 03:41:56 does understanding threat model depends on specifics or can it be generic to sensors 03:42:10 q+ 03:42:14 ack richt 03:42:17 Darobin: we should have a collection box for when people ask for a generic 03:42:33 ack fjh 03:42:47 ack fjh 03:43:05 Bryan: on the one hand, postMessage is generic 03:43:16 some sensors read, some act 03:43:24 ... But we don't like sensors as generic 03:43:31 s/some sensors read, some act// 03:43:38 q+ 03:43:47 ack Claes 03:44:20 Darobin: there's a difference between geolocation and temperature 03:45:03 Claes: discovering sensors using technology Intents, model makes sense to me 03:45:45 Bryan: you'll have middle ware on the device 03:45:58 ... Which will be used 03:46:18 ... If we don't facilitate sensor access 03:48:09 Bryan: I'm good with not rehashing old ground 03:48:13 ack richt 03:48:51 josh_soref: look how we simplified network info, likely to need to simplify sensors as well 03:49:01 bryan: agree, need prototyping 03:49:11 richt: need to see implementations 03:51:06 Richt: Josh_Soref is right, we need to shred apis and rebuild to address use cases instead of apiece requests 03:51:31 s/apiece/apis 03:51:39 ... We accept documents to CVS 03:52:14 ... It's really hard to get rid of them 03:53:01 Darobin: the point Josh_Soref made about network information 03:53:25 ... Is that we aren't reviewing things 03:54:05 ... When we do, tell output is better, but doesn't look like the initial input 03:54:21 jerry has joined #DAP 03:54:33 ACTION: Frederick to send a CfC about changing the design of Sensors 03:54:34 Created ACTION-518 - Send a CfC about changing the design of Sensors [on Frederick Hirsch - due 2012-03-28]. 03:54:49 Fjh: we need a CfC to explain why the proposed approach is the wrong way 03:55:20 s/tell/the/ 03:56:16 Richt: should something based on discovery be suggested? 03:56:19 Stephan_Steglich has joined #DAP 03:56:47 Claes: yes, maybe based on Intents 03:57:33 Bryan: once you get it, how do you talk to 03:57:50 you treat a generic sensor as a service. 03:58:06 Josh: my hope is that we deal with this via intents. 03:58:08 s/explain why the proposed approach is the wrong way/obtain agreement to discontinue work on current Sensor API spec as-is, review different cases, refactoring use of webintents etc 03:58:13 I can agree in principle that to progress work on sensors that if the only way is to work on individual specs, we should do that at least. 03:58:28 we do not want WG members to devote resources on work that might no progress or be implemented as is 03:59:05 Josh: for example a get temperature intent, and each individual sensor ends up with its own intent. 04:00:39 I would recommend though that if we have consensus on the usefulness of discovering what sensors are accessible (e.g. via Web Intents), then that work should also proceed. Accessing the specific sensors then could be individual spec work. 04:01:07 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/0011.html - example B\ 04:01:26 Bryan: for each sensor, how would you implement it as a service, as a XHR, or what? 04:01:32 ^-- Josh's example for exposing temperature sensor via Intents. 04:01:43 s/B\/B/ 04:01:59 scribenick: dsr 04:02:36 dsr: it depends, you could use XHR, websockets, or whatever is appropriate. 04:03:40 Josh talks through an email with thermometer as an example of a web intent. 04:04:34 q+ 04:04:46 q+ 04:05:07 This is an email from 21 Nov 2011. 04:05:24 close ACTION-517 04:05:25 ACTION-517 Kill Media Capture API closed 04:05:42 This can be realized with a real sensor, or with a service exposed by a website. 04:05:59 close ACTION-297 04:05:59 ACTION-297 Draft up TZDate closed 04:06:38 Oliver: using web intents could result in exposing users to choices which aren't really important to them. 04:07:19 Bryan: if we can use a consistent model for web intents for sensors, that would be fine. 04:07:24 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/author.html 04:08:09 Josh: I sent off 5 parts via email to introduce the concepts involved in web intents. 04:08:10 close ACTION-397 04:08:10 ACTION-397 Coordinate with HTML WG chairs about Capture, include the HCG closed 04:08:18 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/0000.html 04:08:27 close ACTION-425 04:08:27 ACTION-425 Incorporate feedback for NetInfo, draft use cases and requirements section closed 04:08:59 close ACTION-479 04:08:59 ACTION-479 Take FeatPerms to ScriptLib to see if this is something that devs would be interested in, taking caveats from implementers into account closed 04:09:18 close ACTION-492 04:09:18 ACTION-492 Prod DavidA and Shane about feedback on Activities/Intents closed 04:09:22 Some suggestions for likely common intents, e.g. save, send, print, share, call, chat. Some of these are similar. 04:09:26 close ACTION-509 04:09:26 ACTION-509 Prepare gUM scenarios for publication closed 04:09:49 kensaku has joined #dap 04:10:06 I can end up printing to a file, where the result is like a share. 04:11:15 Josh talks about the sensor examples, e.g. get temperature, get orientation. 04:11:49 We will need multiple deliverables, including a best practices note. 04:12:38 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/0012.html 04:12:54 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/0011.html 04:13:54 web apps shouldn't know how/where the data was obtained. 04:14:48 We need a way for persistent user defined names. 04:16:15 Josh uses the term "hub" for assemblies of devices/services, e.g. a thermometer which knows where it is. 04:17:26 Users should be able to change the provider of a service without the application becoming aware of the change. 04:17:51 richt: RPC doesn't lend itself to hot swapping. 04:18:23 josh: consider example of a keyboard, the app only needs the key stroke stream. 04:18:47 swapping keyboards between keystrokes shouldn't effect the app. 04:18:54 Present+ Anssi_Kostiainen 04:20:17 the user agent may register services as it finds them in the background, but apps only become aware when requesting a particular intent. 04:20:18 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/0039.html 04:20:32 http://lists.w3.org/Archives/Public/public-web-intents/2011Nov/0038.html 04:20:42 Bryan: user invoked discovery example: I am in a hotel and walk up to a device. 04:22:08 Bryan: I may not have permission to use local discovery protocols directly, but instead could have access to a proxy discovery service. 04:23:06 Josh: user agents may record devices it sees advertisements broadcast over the networks it is connected to. 04:24:00 Josh attempts to open the Mac printing dialog to see if it shows any discovered printers visible via bonjour (zeroconf) 04:24:11 ACTION-518: http://lists.w3.org/Archives/Public/public-device-apis/2012Mar/0136.html 04:24:11 ACTION-518 Send a CfC about changing the design of Sensors notes added 04:24:17 ACTION-518 closed 04:24:17 ACTION-518 Send a CfC about changing the design of Sensors closed 04:25:05 Josh: inspectors would be useful for developers working with intents. 04:25:26 richt: I love the idea of transparency, and think logging is really nice! 04:27:13 Josh: unaffiliated reputation providers would be valuable for services involving confidential data. 04:28:19 print dialogs are a example of a design pattern that we should aim for with web intents. 04:29:47 especially with the means to print to PDF as an alternative to printing to actual media. 04:30:39 Greg: there are some sensors that don't fit the request/response pattern. Proximity is an example. 04:31:25 Robin: yes, proximity provides an event stream. 04:32:21 q? 04:32:22 Oliver: still concerned with location example, where there are multiple location providers. 04:32:29 zakim, queue closed 04:32:29 I don't understand 'queue closed', fjh 04:32:37 zakim, close queue 04:32:37 ok, fjh, the speaker queue is closed 04:33:10 Josh talks about filters that indicate the location precision. 04:33:29 ack richt 04:33:32 ack gbillock 04:33:54 Greg: there are application specific prompts for location. 04:34:23 When people install a particular location provider, they can learn about the precision etc. at that time. 04:34:47 Oliver: that won't work for automatically registered providers. 04:35:29 Josh: I much prefer providers to offer a UI describing their service, e.g. a map with a circle indicating the precision for a location provider. 04:36:25 greg: showing a map can be helpful when the location is actually wrong! 04:36:57 aizu has left #dap 04:37:04 rrsagent, generate minutes 04:37:04 I have made the request to generate http://www.w3.org/2012/03/21-dap-minutes.html fjh 04:43:34 sicking has joined #dap 05:35:44 gbillock has joined #dap 05:39:53 Wonsuk has joined #dap 05:40:51 Ruinan has joined #dap 05:42:56 aizu has joined #dap 05:43:18 a12u has joined #dap 05:46:40 bryan has left #dap 05:46:41 ScribeNick: richt 05:46:59 Topic: Web Intents - Part 2 05:48:27 james: Scalable extras for future use cases. 05:48:38 james: may relate to Versioning. 05:48:49 http://www.w3.org/wiki/WebIntents/ContactsAPI 05:49:23 gregb: Like the idea of object literals that can be overloaded. 05:49:46 james: if you have seperate extras in the future then you will have a different name. 05:50:16 s/seperate/separate/ 05:50:29 shunan has joined #dap 05:51:22 james: For the API itself when we need to make a change we add a version number to it. 05:51:34 darobin: we don't. we just add methods and properties. 05:53:41 james: let's look at permissions. 05:54:36 Claes has joined #dap 05:54:51 Josh_Soref: the fact that I trust foo.com for certain tasks it may not apply for others. 05:55:25 Josh_Soref: fine to remember things I come across as I browse but I still want the choice when I actually need something. 05:56:14 james: Sounds like an addition to the registration API for 'Learn more...' about this service. 05:56:47 AnssiK1 has joined #dap 05:56:59 Josh_Soref: Yes. Would also be good if it also records when and where I discovered the service initially. 05:57:27 bryan has joined #dap 05:57:42 james: not opposed to 'Learn more'. It would be optional. It does add another attribute for registration but seems reasonable. 05:59:16 james: "How do we give persistent permissions for the same action type on one page." (from sticky board in room) 05:59:53 Josh_Soref: Assuming I'm on a website that is operating a weather station. requires monitor temperature and get location. 06:00:09 Josh_Soref: I want to be able to go to the site and have these things work so I can get to the information quicker. 06:00:27 s/things work/things just work together/ 06:00:39 gao has joined #dap 06:00:51 qiang has joined #dap 06:00:54 james: two things. the first is remembering the preferences. the second is not requiring a user initiated action. 06:01:05 Josh_Soref: Looking for a way to make the whole process automated somehow. 06:02:21 Josh_Soref: an easier case, we'd like to use intents to provide geolocation. 06:03:19 james: with geolocation there are obviously privacy concerns but in general I like the idea. 06:04:06 james: are we thinking this requires changing to the API? 06:04:20 gregb: might require a change to the semantics of the user gesture we have right now. 06:04:21 bryan_sullivan has joined #dap 06:05:12 gregb: Letting intents trigger without a user gesture is something we don't know how to do yet. 06:06:05 gregb: Maybe if you get a verification page that could work instead of something up front but we would need to think about it more. 06:07:01 AnssiK has joined #dap 06:07:27 james: we should take an action to define an error that says "This was not user initiated". 06:08:48 nwidell has joined #dap 06:09:12 james: "how much UX is required for service registration?" (from sticky board in room) 06:09:19 james: josh, you suggest "none". 06:09:25 Josh_Soref: right 06:09:52 qiang has joined #dap 06:10:35 Josh_Soref: I have some ideas on this. The more you use something then these should appear in the services list with others hidden behind. 06:11:18 Josh_Soref: so there are some heuristics to use here for service listing: when, where I discovered it, how often I've used it, when I last used it. 06:12:34 how popular a service is, whether my friends use it etc. 06:13:34 I've listed the Use Cases at http://www.w3.org/wiki/WebIntents/ExtraUseCases 06:13:42 now we need people to fill them out :) 06:13:45 record action for james to specify the no info bar recommendation idea. 06:14:08 can't directly assign an action to james as he's not on the IRC channel. 06:14:25 s/on the IRC channel./in the tracker system/ 06:14:42 james: "Should the user be able to restrict web intents to a list of well-known action types" (from sticky board in room) 06:15:22 james: It's up to the user to choose what they're doing. We will have strings for the top actions. Might just confuse the user to give them an understanding of what the actions are. 06:15:32 james: may also have some localization issues. 06:16:42 Josh_Soref: On localization, it may problematic if we get verbs registered in e.g. Chinese. 06:17:01 james: that's fine. that would probably useful in a localized context. 06:17:12 s/probably useful/probably be useful/ 06:17:57 james: ...for localized actions. 06:18:15 gregb: we have been suggesting the action strings be URLs. 06:18:50 ..so it's just URL. 06:19:27 james: Someitmes this might make sense for non-English communities or actions that relate to a specific locale. 06:20:00 darobin: Generally we need a best practise not to mint new actions where existing actions already exist. 06:20:04 "A specification SHOULD reuse an existing URI scheme (rather than create a new one) when it provides the desired properties of identifiers and their relation to resources." (from http://www.w3.org/TR/webarch/#URI-scheme) 06:20:31 james: right, darobin. that makes sense. 06:21:28 OliverD: This may not be an issue but the risk might be for a service to register hundreds of actions. 06:21:59 james: it could be an issue. a page registers for every intent action imaginable. we need to manage those cases. 06:22:21 ...e.g. through social recommendations, feedback, reviews. 06:23:10 james: off on a tangent. how far can we spread knowledge of sites. It's really about reputation. 06:23:23 james: we might be heading towards needing this reputation to be queryable. 06:24:52 james: back to the question at hand: "Should the user be able to restrict web intents to a list of well-known action types?" 06:25:08 james: maybe it's not about the action but the services themselves? 06:25:24 bryan_sullivan: I may want to turn off a whole action. 06:25:52 bryan_sullivan: there should be a way to disable certain types of actions you don't want to see. maybe I want to disable 'share'. 06:26:47 james: Isn't that a blacklist? 06:27:15 bryan_sullivan: I want to disable a certian action. The opposite might be true. Disable all and enable some. 06:27:52 Josh_Soref: So if there's an annoying client I want to block them without them knowing about it. 06:29:22 james: I'm not opposed to adding intent identifiers to elements. 06:29:32 ...but this is getting a little complicated. 06:29:59 james: we could compromise that this only works on clickable things. onclick. 06:30:23 fjh: what's the objective here? 06:30:55 james: if the user can disable a certain action and nothing happens then the page is going to know it. 06:31:00 q+ 06:31:08 zakim, open queue 06:31:08 ok, fjh, the speaker queue is open 06:31:26 q+ 06:32:19 fjh: why can't we have a default action. let's take 'pay'. could I choose something that doesn't actually do anything i.e. a deadend stub? 06:32:51 ..that is the default action that then doesn't actually do anything meaningful (in this case 'pay' for something). 06:33:09 james: we can't say anything on white/black-listing unless we have a solution for this question. 06:34:17 Josh_Soref: If a site wants to do something and the user doesn't want to do it then the site is being annoying. 06:34:31 Josh_Soref: but there may be parts of the page that are useful. 06:36:01 choice not to visit site or to leave, choice not to pick 06:36:09 james: we have a picker so you have another layer of choice. If you don't want to pay you don't choose a service and click a button. The choice remains with the user to actually trigger the default action. 06:37:11 james: so the answer to the question is "no, because the user still has choice to trigger the service to fulfill the action". 06:37:47 ^-- FYI: the question was "Should the user be able to restrict web intents to a list of well-known action types?" 06:38:09 s/to trigger the service/to trigger any service/ 06:38:56 james: let's take a look at 'Privacy' issues. 06:39:17 james: "Informed consent usable for Privacy" (from sticky note on board) 06:39:49 fjh: Essentially the user needs to know what they're doing and why. So we need to be careful that there is enough information about what's going on so users get it. 06:40:22 s/about what's going on so users get it./about what's going on when invoking an intent/service so users understand it./ 06:41:02 gregb: not trivial to get a user gesture e.g. pop-unders. 06:41:26 fjh: we should put a note in the spec around user gesture requirements. 06:42:06 Josh_Soref: Even though we want fast-paths to action completion we don't want to make it trivial if I'm browsing a web site for the first time. 06:44:20 james: the UI won't necessarily be in the location where you initially tapped to invoke the picker. 06:44:54 Josh_Soref: I don't think that is sufficient but I'll comment more later. 06:45:10 s/around user gesture requirements/around user gesture requirements and providing necessary context for decisions and permissions/ 06:45:22 james: "How will web intents work with Private Browsing - Registration phase" 06:45:33 james: simple answer. no intents registration in private browsing mode. 06:46:31 Josh_Soref: I'd propose that we register in the context of the private browsing session but that's lost when leaving the private browsing session. 06:46:45 james: ok. works for me. 06:46:55 darobin: same principle for e.g. cookies 06:47:57 james: second part: "How will web intents work with Private Browsing - Invocation phase" 06:48:34 james: actions are still available. 06:49:07 darobin: we could leak information via these action invocations. 06:49:52 darobin: we could add a note to the spec "The user agent should ... in private mode." 06:51:01 s/The user agent should ... in private mode/Implementers should take issues relating to private browsing into consideration when invoking intents so as to avoid identifying information leaking./ 06:51:24 james: next up "How should explicit intents work with private browsing" 06:51:33 darobin: same as normal. 06:51:47 james: "Should the UA warn when the intent action is rare" 06:51:55 Josh_Soref: A UA should consider doing that. 06:52:14 gregb: If you haven't seen it before you get a 'speed bump'. 06:52:53 bryan_sullivan: we could be hampering extensibility if we keep putting in road blocks. 06:52:56 james: I agree. 06:53:11 fjh: I say we keep it simple rather than introduce obstacles. 06:54:18 zijun has joined #DAP 06:54:22 james: "What can we hide from providers". What is too much to give to providers? 06:54:48 q+ 06:54:55 Josh_Soref: In my outline I suggested that there should be some transparency/inspectors of data travelling to/from service providers. 06:55:14 james: giving a pseudo-sandbox to providers? 06:55:17 Josh_Soref: potentially. 06:57:14 Josh_Soref: For example I don't want a site to know which provider I'm using. 06:57:27 ... and vice versa. 06:58:54 darobin: we can limit the information transmitted e.g. no referer header. 06:59:34 gregb: the referer for instantiating a service should be the intent action. 06:59:41 +1 to no sharing referer header to provider, to avoid information leakage, a privacy concern 06:59:45 darobin: agree 06:59:47 james: agree 06:59:51 Josh_Soref: agree 07:00:07 +1 to sharing intent action as referer 07:00:09 ... all above agreeing with gregb's proposal. 07:04:07 Josh_Soref: can we ensure people can't introduce line feeds in to an action? 07:04:18 gregb: good point. it must be properly escaped. 07:04:29 james: we'll make a note to explicitly address this point. 07:06:04 james: "Inline disposition". General discussion. Should we do it? 07:06:09 fjh: generally yes. 07:06:38 Josh_Soref: Who requests the inline disposition - sites? 07:06:40 james: yes 07:06:55 james: given form factor considerations you may not have inline dispositions. e.g. mobile phones. 07:06:58 s/generally yes./inline disposition has a reason for being specd, it offers a provider the means to offer a usable page/ 07:07:19 james: so you can request it but shouldn't be concerned if you don't get it. It's a preference only - a hint for the UA. 07:08:10 james: the default is 'window' disposition. 07:08:30 ... that's "I want a new context". 07:08:44 ... we're more flexible on inline disposition 07:09:04 Josh_Soref: Is the intents dialog modal? 07:09:08 q+ 07:09:24 james: tab modal. z-indexed on top. you can still interact with the tab content. 07:10:34 gregb: when we think about mandating inline, when service providers are going to support intents, they're going to se inline disposition most of the time. The user experience will be consistent when a user e.g. visits their bank site. 07:10:44 s/to se/to use/ 07:10:46 q+ to ask about inlined using iframe or something like that? 07:10:50 ack fjh 07:11:08 Josh_Soref: If certain providers do and others don't then we get different experiences. 07:11:12 ack Claes 07:11:33 q? 07:11:39 Claes: We see use cases for inline disposition from our experimentation with web intents to date. 07:12:34 vera has joined #DAP 07:12:51 Claes: It is easy to spoof but still would hope for more options - inline in picker, hidden(?). using ssl for all services. 07:13:25 s/using ssl for all services./using ssl for all services may be necessary./ 07:13:40 ... we should do a security review and assess this last point. 07:13:50 q? 07:13:53 ack darobin 07:13:53 darobin, you wanted to ask about inlined using iframe or something like that? 07:14:39 darobin: wonder if we can assign things directly to an iframe. 07:14:52 Josh_Soref: still potential for click-jacking against any embedded content. 07:15:24 gregb: any anti-clickjacking mechanism could not be applied to that page. 07:15:33 james: how do you close an embedded service? 07:15:41 Josh_Soref: not easily. 07:16:22 james: concern would be on the security aspects of course. 07:16:36 [I wonder if we could have always-on-top iframes to help with clickjacking issues] 07:17:11 james: not sure if we should even leave allowing inline disposition up to implementors. 07:17:23 Josh_Soref: we may want a MUST NOT in the spec around these points. 07:17:41 s/a MUST NOT/a MUST NOT statement/ 07:18:42 Josh_Soref: Instead of offering embedded we're kind of offering hidden instead. 07:18:51 james: we started with this in the spec. 07:19:14 ... we decided against it due to UX issues. We can't preclude it since we have use cases for this mode. 07:19:41 ... so we took it out for a.) UX issues b.) the assumption you should be able to display *something* to the user. 07:22:14 s/ use cases for this mode./ use cases for hidden mode./ 07:22:28 s/so we took it out/we took it out/ 07:26:02 Action for Claes to add a proposal for hidden disposition. 07:26:02 Sorry, couldn't find user - for 07:26:09 Action Claes to add a proposal for hidden disposition. 07:26:10 Created ACTION-519 - Add a proposal for hidden disposition. [on Claes Nilsson - due 2012-03-28]. 07:27:15 james: "Will clients want UA provided UI for intents?" 07:27:26 james: my feeling on this is no. 07:27:35 james: seems a bit much. 07:27:44 Josh_Soref: Let's push this in to the future work category. 07:27:56 james: right. 07:28:10 james: probably belongs in HTML5. 07:29:09 james: "Saving pipelines". We talked about this yesterday. 07:30:34 Josh_Soref: asuming 'share' and 'save' have the same action url. 07:30:43 s/asuming/assuming/ 07:35:05 james: "Accessibility". 07:35:18 james: A lot of work happening on this topic in other groups at W3C. 07:35:33 james: it's a work in progress. 07:35:41 fjh: let's take a 15 minutes break. 07:35:44 07:52:43 a12u has joined #dap 07:55:29 q+ 07:57:59 gbillock has joined #dap 07:59:46 sunny has joined #dap 07:59:59 scribenick: bryan 08:00:55 fjh: 1st question - why would something be hidden, don't we want the user to be in control? 2nd question: why would apps lie about the purpose of an intent? 08:01:34 james: issue - how can the verb space be managed for interoperability 08:02:06 ... the lying issue was about pages misbehaving, we should not have to worry about that 08:02:25 fjh: on hiding the actions, this limits the user choice 08:03:16 james: if there is no need to display a UI, we don;t have to force the page to provide a UI 08:03:28 josh: the picker is always displayed 08:03:39 fjh: ok, understand 08:04:07 james: issue - what can we learn from previous groups 08:04:33 fjh: will take an action to look at WS* to see what might be relevant 08:04:49 james: issue - android intent holes to avoid 08:05:40 james: will take an action to talk to Google to see what might need to be considered 08:05:58 s/Google/Android team/ 08:06:01 action: fjh to look at WS* to see what might be relevant 08:06:03 Created ACTION-520 - Look at WS* to see what might be relevant [on Frederick Hirsch - due 2012-03-28]. 08:06:12 james: issue - what is the interaction with other groups? 08:07:03 darobin: it means what does a group do when they want to create a Web Intents based API? 08:07:16 ... outside W3C we don't need to worry 08:07:38 ... we will write specs, try to do it right, and people will cut & paste 08:07:49 james: where will verbs be defined for UPnP? 08:08:26 vera has joined #DAP 08:09:03 darobin: Claes has an AI to coordinate with UPnP forum on the mapping of intents to UPnP 08:09:03 lgombos_ has joined #dap 08:09:18 ACTION Claes to coordinate with UPnP forum about extensions required for Intents 08:09:18 Created ACTION-521 - Coordinate with UPnP forum about extensions required for Intents [on Claes Nilsson - due 2012-03-28]. 08:09:26 s/has/will have/ 08:09:29 kensaku has joined #dap 08:10:05 james: issue - use cases for persistent permission, e.g. an app comes registered with another app 08:10:09 Daniel-Samsung has joined #dap 08:10:18 darobin: this fallbacks for intents 08:10:42 josh: is it possible to have more than one suggestion? 08:10:52 kensaku has joined #dap 08:11:05 james: would we say its up to the UA to determine how much to display? 08:11:24 ... issue - HTML5 impact 08:11:37 ... this is the intent tag 08:12:15 ... issue - how much UX/UI should be MUST? 08:12:23 ... we decided nothing 08:12:46 ... issue - what is the relationship between client and service pages? 08:13:00 ... seems to be already answered in the discussion 08:13:08 ... issue - how to educate users? 08:13:18 ... we decided it was pointless 08:13:27 ... issue - MITM attack 08:13:44 ... maybe AI is for someone to attempt MITM to demo the risk 08:14:01 josh: should be pretty easy 08:14:24 darobin: same as phishing 08:14:39 josh: why phishing vs MITM? 08:15:11 ... the FB URL for sharing is HTTP - in a coffeehouse the DNS may be local 08:15:36 james: we could add a best practice on use of HTTPS 08:16:08 james: what are spam/phishing risks? 08:16:25 darobin: nothing too much different from the rest of the web 08:17:14 josh: assuming the provider trusts the user's data, do users know what they are +1'ing? 08:17:42 ... its a form of spam, for users to be unaware and have to be told what they are sharing 08:18:02 james: this could allow savvy users to point out bad pages 08:18:13 ... someone had an AI for logging? 08:18:43 ... issue - is there a case for relaxing same-origin? 08:19:04 josh: my case is that while I authorized sharing, I did not auth other things 08:20:56 james: this is the same as the web permissions problem 08:21:23 ... issues - auditing - Yes 08:21:49 ... issue - service wants to be invoked by certain clients 08:22:04 gregb: this comes up for regulatory cases e.g. banks 08:22:15 ... something the server can implement 08:22:44 ... could be used for figerprinting 08:22:51 ... don't want that 08:23:28 josh: we don't want enable servers to whitelist clients 08:23:44 s/figerprinting/fingerprinting/ 08:24:22 james: we could say it should be a SHOULD for some cases 08:25:06 [ applause ] 08:25:28 topic: Battery & Vibration 08:25:42 http://dvcs.w3.org/hg/dap/raw-file/tip/battery/Overview.html 08:26:08 http://www.w3.org/2009/dap/wiki/ImplementationStatus 08:26:16 anssik: latest is LC ended 20DEC2011 - working toward CR. Implementations exist for webkit and mozilla 08:26:54 ... webkit landed a week ago, in FF 10 2 months ago. 2 major projects, also phonegap 08:26:54 paul has joined #dap 08:27:07 ... all the open issues and comments have been closed 08:27:21 fjh: acks 08:27:42 anssik: will organize a call with director to move it forward 08:27:49 http://www.w3.org/2009/dap/wiki/FutureWork 08:28:03 ... some new features have been proposed - these need to be in the future work wiki 08:28:13 fjh: incl the email traffic this week 08:28:29 anssik: yes, those should be in the future work wiki 08:28:44 fjh: so all that commented should update the wiki 08:28:58 anssik: seems no more to discuss at the moment 08:29:05 https://www.w3.org/2006/02/lc-comments-tracker/43696/WD-battery-status-20111129/doc/ 08:29:12 ... congratulate yourselves 08:29:17 [ applause ] 08:29:26 disposition of comments is completed in LC-Tracker 08:29:34 topic: Vibration API 08:30:08 ... smallest API ever 08:30:32 disposition of LC comments -> https://www.w3.org/2006/02/lc-comments-tracker/43696/WD-vibration-20120202/doc/ 08:30:53 ... LC ended 1MAR2012. Spec is also going to CR. Implemented in webkit and mozilla. Webkit a month ago, and mozilla in FF11 one week ago 08:31:18 ... so this is a done deal, very tightly scoped. as with battery, prefer future work to be documented on the wiki page 08:32:02 ... one issue has come up, in vibration we dont have a privacy section, IMO we have baked this into the API 08:32:10 gbillock has joined #dap 08:32:14 "If the device does not provide a vibration mechanism, or it is disabled, the user agent must silently ignore any invocations of the vibrate() method." 08:32:20 http://www.w3.org/TR/2012/WD-vibration-20120202/ 08:32:31 "For example, an implementation might abort the algorithm because the user has set a preference indicating that pages at a given origin should never be able to vibrate the device, or an implementation might cap the total amount of time a page may cause the device to vibrate and reject requests in excess of this limit." 08:32:39 "An implementation may abort the algorithm at this point." 08:32:41 q+ to bring up testing 08:32:44 ... other one important 08:32:57 ack fjh 08:33:31 ack darobin 08:33:31 darobin, you wanted to bring up testing 08:33:33 ... on purpose we are trying not to spec UI. Im wondering if this guidance is needed for implementers to do the right thing? 08:33:39 q+ 08:33:42 paul_ has joined #dap 08:33:48 q? 08:34:23 darobin: a privacy section is not required, if we are satisfied we dont need a section 08:35:23 anssik: the notes should be enough. impementers will come up with innovative UIs. No privacy/security threat except battery consumption. Users will likely just navigate away. 08:35:40 ... that was my only issue. 08:36:36 http://dev.w3.org/2009/dap/vibration/Overview.html 08:37:02 darobin: we don't have any tests for battery right now? 08:37:19 q? 08:37:31 ACTION: Robin to write tests for Battery 08:37:31 Created ACTION-522 - Write tests for Battery [on Robin Berjon - due 2012-03-28]. 08:37:37 anssik: no, webkit contributors have been asked for tests, there may be something specific for webkit 08:38:23 ... its on my todo list for battery 08:38:53 ... have to have tests for CR 08:39:03 ... and two interoperable implementations 08:40:00 ... defer to chairs to handle CR transition 08:40:25 ... will take an action for both specs 08:40:32 action: anssik to work on test cases for battery and vibration 08:40:32 Sorry, couldn't find user - anssik 08:40:44 action: anssi to work on test cases for battery and vibration 08:40:45 Created ACTION-523 - Work on test cases for battery and vibration [on Anssi Kostiainen - due 2012-03-28]. 08:41:09 darobin: have some time to work on the test suites 08:41:15 q? 08:41:39 anssik: could use this time to talk about AOB 08:41:40 ack richt 08:42:09 s/AOB/other topics related to vibration/ 08:42:14 richt: dont see use cases - wondering why to expose vibration 08:42:18 bryan: games 08:42:34 (and sex toys) 08:42:39 anssik: it's intentional, use case was for gaming 08:43:01 paul has joined #dap 08:43:29 q+ to ask when Opera will implement 08:43:49 richt: re note in the spec about indefinite vibration - what is a decent amount of time for a vibration to end? 08:44:07 ... 2nd thing is nothing about navigating away - this should cancel the pattern 08:44:29 anssik: in FF about:config, the default max is 10 sec 08:44:37 in FF about:config, see dom.vibrator.max_vibrate_ms 08:44:42 why isn't this decision of app? 08:45:00 ... may be more or less per the impl 08:45:16 ... steps 5 and 7 tell what to do 08:45:28 ... an exception is thrown 08:45:56 ... not a decision of the app, better to have the UI control it - and configurable 08:46:04 ... similar to storage limits 08:46:04 got it, misunderstood what Richt was saying 08:46:33 darobin: when will opera implement it? 08:46:38 ack darobin 08:46:38 darobin, you wanted to ask when Opera will implement 08:46:43 richt: unsure 08:46:53 \o/ 08:47:46 darobin: thanks to anssik for joining and doing all the work 08:48:16 +1 thanking Anssi 08:48:38 anssik: re AOB, discussions on HTML Media Capture - can I help. we are stuck with the extra media attributes, right? Did we agree on a way forward? 08:48:55 darobin: we are waiting on the 1st implementer, to see how the hint is shaped 08:49:09 anssik: no agreement yet on the hint? 08:49:19 darobin: not yet 08:49:42 q+ to talk about agenda 08:50:07 ... on the media capture TF people think the declarative way is still useful 08:50:20 ... isnt chrome implementing? 08:50:31 ... does Chrome have documentation? 08:50:34 http://code.google.com/chrome/mobile/docs/overview.html 08:50:38 gregb: no idea 08:50:58 Is someone implementing HTML Media Capture? 08:51:03 anssik: need to know the details of the implementation 08:51:45 AI to gregb to find out whats up with Chrome 08:51:57 s/AI/ACTION/ 08:52:00 s/extra media attributes/capture/ 08:52:23 Is there a URL I can go to to test the media capture? 08:54:06 topic: system level APIs 08:54:13 http://lists.w3.org/Archives/Public/public-device-apis/2012Feb/0046.html 08:54:22 http://lists.w3.org/Archives/Public/public-device-apis/2012Feb/0046.html 08:55:32 darobin: history lesson on DAP charter re system level APIs, unsafe, requiring permissions... did not get support in the broader web community, so we switched to browser only 08:56:07 email request re system level apis -> http://lists.w3.org/Archives/Public/public-device-apis/2012Feb/0047.html 08:56:15 ... in meantime we have things being developed, but other people are using web for the entire system. where and how to standardize the APIs comes up regularly 08:56:27 ... e.g. APIs for Tizen and B2G 08:56:39 q+ Josh_Soref 08:56:55 ... we could do this in DAP or a new group e.g. SLAPI 08:57:02 ack fjh 08:57:02 fjh, you wanted to talk about agenda 08:57:09 ack josh_soref 08:57:39 josh: 1st question geoloc, vibration, battery. not system level APIs? 08:57:57 darobin: no, they work in the browser security model 08:58:07 q+ 08:58:19 josh: file writer, file system ? 08:58:45 darobin: they are getting close. using a picker approach is OK, but some apps need more system level access. 08:59:18 dom: well geoloc could be said to be borderline; its security model is a bit awkward for browsers IMO 09:00:44 q+ to suggest we review Sakari's email 09:01:28 darobin: we are seeing limits to the ability to expose system level APIs without a permissions model 09:01:44 q+ Josh_Soref 09:01:59 ack richt 09:02:26 richt: we have seen more progress since rechartering. had to work hard to set expectations. would not be good to upset that balance. recommend system level be in a new group (or not here) 09:02:42 ... trusted/installed approach leads to poor designs 09:03:05 ... would not mix that up with the browser approach 09:03:22 q+ 09:03:41 ack fjh 09:03:41 fjh, you wanted to suggest we review Sakari's email 09:03:45 bryan: btw, APIs are at https://developer.tizen.org/help/index.jsp?topic=%2Forg.tizen.help.web.api%2Findex.html 09:03:56 WRT my action item, I'm asking about http://dev.w3.org/2009/dap/camera/ ? 09:04:44 fjh: sakari's email describes issues leading to WAC/Tizen needing to develop non-standard APIs 09:05:00 ... wondering if there is a need being missed 09:05:36 gbillock: I think the action was to ask about implementation of http://www.w3.org/TR/html-media-capture/ 09:05:45 wonsuk: Tizen has bluetooth and NFC. some more APIs, but not sure they require standards 09:05:55 what do we need beyond what we have in DAP, what is the issue here in concrete terms 09:05:57 gbillock: this is why: http://davidbcalhoun.com/2011/android-3-0-honeycomb-is-first-to-implement-the-device-api 09:06:01 s/terms/terms? 09:06:16 ... B2G has more items e.g. call and control for wifi, browser APIs etc 09:06:31 ... Tizen has a few items, but B2G more 09:07:16 fjh: maybe we have 90% of what is needed, and what is needed could work in a web way, and we could consider the reqs and may not need to spin off a new group 09:07:28 B2G wants some API, why don't they define themself? 09:07:34 gbillock. hmm that's the same link with a different name. didn't realize we published in two different normative locations. 09:07:51 ... maybe stack, unclear about bluetooth... details are needed on what is not being met 09:08:09 ... actually, one is the editor's draft and the other is the latest working draft. 09:08:20 ... we didnt decide yet what is the right way 09:08:48 ... tomorrow we will introduce the tizen APIs and need to investigate the B2G project APIs 09:09:15 I suggest that we need to understand (1) what cannot be done with DAP APIs currently being developed, and (2) whether a web approach might not work for what is needed - then we can understand what might be needed to be done at a system level, implies a charter for decision 09:09:20 ... AFAIK system level APIs like call and wifi, browser USB ... 09:09:20 q? 09:09:21 Mozilla's (partial) list for B2G: http://groups.google.com/group/mozilla.dev.webapi/browse_thread/thread/5649fb1085144d13/34fe9feea3887140 09:09:34 q+ 09:09:42 ack Josh_Soref 09:10:52 josh: DAP had browser vendors but they ran away. DAP got them back. We're hearing from a browser vendor or two thinking about doing what they ran away from. 09:12:12 ... not sure how practical it will be - will it be portable? e.g. USB device paths 09:12:22 darobin: may issues, but they can be worked out 09:12:37 ... e.g. no portability with the browser APIs 09:12:45 gao has joined #dap 09:12:49 josh: hoping intents will solve some problems 09:13:33 ... can we ask that new ideas be considered here first? 09:14:20 darobin: no, such constraints wont work 09:14:36 ... it can say there needs to be coordination 09:14:57 q+ 09:15:18 ... there is an incentive for surfacing APIs to the browser, but some things cant be 09:15:26 my point is that we should see if how much of this can be used with our browser approach, then see the gaps, then see if a charter is needed 09:15:50 also suggest that writing the charter is not the work of this group 09:15:55 josh: assuming DAP manages to get out a REC that supersedes other work... what happens? 09:16:09 q? 09:16:42 richt: worried about intergroup conflicts 09:17:01 it all depends on the real requirements as to what is needed 09:17:06 q? 09:17:08 ack Deepanshu 09:17:10 ... would a reduced scope lead to conflict - there might be significant overlaps 09:17:26 deepanshu: do we need system level APIs in the first place 09:17:57 bryan: we don't have them 09:18:07 darobin: we don't have portable APIs 09:18:27 deepanshu: are we talking about installed natively running APIs? 09:18:42 josh: yes, as in B2G they only have JS 09:19:07 deepanshu: why does B2G need W3C to do this? 09:19:26 darobin: because they are a project not an DO 09:19:31 s/DO/SDO/ 09:19:54 ... some of the parts can't be done in a genuine web context 09:20:07 B2G = Boot to Gecko https://wiki.mozilla.org/B2G 09:20:12 q? 09:20:14 ack bryan 09:20:45 bryan: took a lot of stuff out of DAP since we could not get it to work in the browser 09:21:22 bryan: had features we needed, could have some in the web with limited scope, but need them back on the table somewhere, market motivation 09:21:34 bryan: need standardization to avoid fragment 09:21:47 now that we're talking about system level APIs such as those spec'd by Tizen, B2G, and friends you may also want to consider Windows Runtime JS APIs: http://msdn.microsoft.com/en-us/library/windows/apps/br211377.aspx 09:21:47 ack anssik 09:22:30 Msft is a member of the DAP WG, so they should be able to chime in and contribute if they see value in standardizing system level APIs 09:22:30 anssik: heads up MS is doing something similar in Windows 8 - if that work goes somewhere, we should get feedback from them 09:22:43 ... adding one more player 09:24:00 darobin: hearing some level of interest, some consensus not to do it in DAP - next step may be to draft a charter 09:24:22 dsr: a charter develops by the W3C team with key stakeholders 09:24:56 ... for this group, do we want to plan recharter for future work? 09:25:12 darobin: it would make sense to do both 09:25:50 josh: we should also talk about crypto 09:26:16 ... re chartering, AC input is also sought 09:26:36 dsr: e.g. if key stakeholders would not join, we may need to change the scope 09:26:53 q? 09:26:54 action robin to prepare charter for system level APIs 09:26:55 Created ACTION-524 - Prepare charter for system level APIs [on Robin Berjon - due 2012-03-28]. 09:27:19 darobin: extensions should be considered in this scope 09:27:47 ... e.g. FF extensions have access via XPCOM to the whole system at least what is exposed to the user 09:28:19 ... in laptop OS e.g. Chrome OS the extensions are how the app talks to the system 09:29:19 topic: what parts of crypto are not in the crypto WG 09:30:02 josh: crypto WG will define a simple API - a good thing, e.g. validate/create a signature 09:30:34 ... some groups want to HDMI type things for a secure channel to TVs 09:31:14 Agenda plan for Thur am (1) feature permissions (2) Tizen review , after lunch (3) NFC 09:31:37 darobin: this is related to the HTML encrypted media proposal 09:32:06 remaining to discuss apart from this - interop/testing (talked some today), calendar, network information api 09:32:08 josh: there is an ask to send content to secure elements 09:32:13 bryan: e.g. UICC 09:32:18 s/this/these items for tomorrow/ 09:33:25 josh: some asks to get content over HTTP with a signature and used on a page 09:33:35 Daniel-Samsung has joined #dap 09:33:55 ... and pull into an HTTPS page without breaking the secure lock UI 09:34:41 bryan: a signature will not protect the content 09:35:06 josh: the signature is attached and the content can be trusted 09:35:58 darobin: if there is anything to add to DAP charter re this, please propose on the list 09:36:36 josh: assuming no more WGs will be created to address things like this 09:36:57 q+ 09:37:00 ... concerned about too many WGs 09:37:04 q- 09:37:06 q? 09:40:02 richt: what about network services discovery 09:40:28 ... suggest to put on the agenda 09:41:12 http://www.w3.org/2009/dap/wiki/F2F_Agenda_20-22_March_2012,_Shenzhen,_China 09:41:13 dsr has changed the topic to: 09:42:52 dsr has changed the topic to: Shenzhen F2F 09:43:26 recess 09:44:55 aizu has left #dap 09:46:04 I have updated the agenda for tomorrow 09:46:10 rrsagent, generate minutes 09:46:10 I have made the request to generate http://www.w3.org/2012/03/21-dap-minutes.html fjh 09:46:44 Wonsuk has left #dap 09:53:10 richt has joined #dap 10:09:56 richt has joined #dap 10:35:08 jfmoy has joined #dap 11:52:08 nwidell has joined #dap 12:13:28 Zakim has left #dap 13:36:43 darobin has joined #dap 13:46:55 jfmoy has joined #dap 13:47:17 a has joined #dap 13:47:33 a has left #dap 13:58:41 richt has joined #dap 14:05:06 yahui has joined #dap 15:03:10 glenn has joined #dap 16:26:11 kensaku has joined #dap 18:21:17 glenn has joined #dap