16:51:10 <RRSAgent> RRSAgent has joined #webauthn
16:51:10 <RRSAgent> logging to http://www.w3.org/2017/03/15-webauthn-irc
16:51:12 <trackbot> RRSAgent, make logs public
16:51:12 <Zakim> Zakim has joined #webauthn
16:51:14 <trackbot> Zakim, this will be
16:51:14 <Zakim> I don't understand 'this will be', trackbot
16:51:15 <trackbot> Meeting: Web Authentication Working Group Teleconference
16:51:15 <trackbot> Date: 15 March 2017
16:57:24 <rolf> rolf has joined #webauthn
16:59:23 <weiler> present+ rbarnes, nadalin, weiler, rolf
16:59:35 <wseltzer> present+
16:59:52 <battre> present+
17:01:29 <weiler> agenda: https://lists.w3.org/Archives/Public/public-webauthn/2017Mar/0247.html
17:01:31 <gmandyam> gmandyam has joined #webauthn
17:01:33 <weiler> weiler has changed the topic to: agenda: https://lists.w3.org/Archives/Public/public-webauthn/2017Mar/0247.html
17:01:46 <gmandyam> present+ gmandyam
17:02:06 <weiler> present+ jcj_moz
17:02:23 <apowers> apowers has joined #webauthn
17:03:14 <vgb> vgb has joined #webauthn
17:03:16 <wseltzer> present+ JeffH
17:03:36 <vgb> present+
17:04:19 <apowers> present+
17:04:30 <jyasskin> present+
17:05:03 <wseltzer> present+ christiaan
17:05:31 <wseltzer> present+ alexei
17:06:14 <wseltzer> scribenick: vgb
17:06:17 <wseltzer> zakim, who is here?
17:06:17 <Zakim> Present: rbarnes, nadalin, weiler, rolf, wseltzer, battre, gmandyam, jcj_moz, JeffH, vgb, apowers, jyasskin, christiaan, alexei
17:06:19 <Zakim> On IRC I see vgb, apowers, gmandyam, rolf, Zakim, RRSAgent, weiler, jyasskin, wseltzer, jcj_moz, trackbot, mkwst, adrianba, slightlyoff, jochen___, battre
17:06:39 <alexei-goog> alexei-goog has joined #webauthn
17:06:55 <vgb> tony: review PRs. Start with #344
17:07:21 <alexei-goog> present+
17:07:31 <vgb> Kim: just made changes to address last comments, ready now
17:07:38 <vgb> JeffH: will approve shortly
17:07:50 <vgb> tony: #348
17:08:06 <vgb> ... still some issues there
17:08:09 <wseltzer> present+ kpaulh
17:08:27 <vgb> jcj_moz: waiting for new commits from Angelo
17:08:39 <vgb> Tony: #375
17:09:00 <vgb> JeffH: still working on understanding feedback
17:09:05 <vgb> ... this is not a rush
17:09:53 <vgb> JeffH: #377 is fixing bugs per review in collaboration with jyasskin
17:10:10 <vgb> jyasskin: ok with me
17:10:28 <vgb> jcj_moz: will review this later today
17:11:02 <vgb> Tony: #378
17:11:18 <vgb> vgb: Had some comments, waiting for Angelo
17:11:37 <vgb> ... #379 is the same status
17:11:57 <kpaulh> kpaulh has joined #webauthn
17:13:28 <vgb> Rolf: #381 is cleanup of DAA parts. Please review
17:13:35 <weiler> present+ kpaulh
17:13:39 <vgb> vgb and jeffh: will do today
17:14:11 <vgb> alexei-goog: would like to hear from Kim about the cancel issue
17:14:16 <selfissued> selfissued has joined #webauthn
17:14:35 <weiler> present+ jfontana
17:14:46 <weiler> present+ selfissued
17:14:48 <rbarnes> rbarnes has joined #webauthn
17:14:52 <rbarnes> present+
17:15:01 <wseltzer> present+ Ketan
17:15:12 <vgb> ... many pages do complex things without navigating
17:16:14 <vgb> ... in this type of situation, the page may want to cancel operations on such a non-navigation page change
17:17:28 <vgb> kpaulh: added this use case to the issue
17:18:02 <vgb> ... agree that browser-level changes could be handled by the browser not by the page
17:19:18 <webauthn> webauthn has joined #webauthn
17:19:39 <vgb> kpaulh: talked to jyasskin earlier about whether promises could be cancellable
17:19:51 <rbarnes> http://memedad.com/memes/1131466.jpg
17:20:24 <vgb> ... fetch is creating an abort operation that can be initiated by a cancellation handle
17:21:13 <vgb> jyasskin: this is part of a larger rethink about adding cancellation to promises (or a pattern achieving the same effect)
17:22:46 <vgb> ... we should study what fetch is doing
17:23:09 <alexei-goog> https://goo.gl/photos/SssLA8aPR8EJQXQp7
17:23:25 <alexei-goog> rbarnes: *nice*!
17:23:59 <vgb> jeffh: that seems like it would add a lot of machinery
17:24:32 <vgb> kpaulh: still kicking this around - is the use case real enough to justify this complexity
17:25:18 <vgb> tony: should move faster on ctap-affecting issues
17:25:29 <vgb> ... so we don't slow progress on that spec
17:26:38 <weiler> rrsagent, draft minutes
17:26:38 <RRSAgent> I have made the request to generate http://www.w3.org/2017/03/15-webauthn-minutes.html weiler
17:26:45 <vgb> vgb: of the tagged issues, is #366 the big one?
17:26:49 <weiler> rrsagent, make logs public
17:26:56 <vgb> tony: may be more, this is just what we have identified so far.
17:27:19 <weiler> chair: nadalin, rbarnes
17:27:22 <vgb> ... should go through and tag any others we see
17:28:41 <vgb> selfissued: about #366, COSE is almost ready and should be used
17:29:29 <vgb> vgb: seems to be a lot of optional fields, should we define a profile?
17:29:39 <vgb> selfissued: yes, we could
17:30:44 <vgb> apowers: will off-the shelf parsers work with COSE? things like negative indexes in there.
17:31:05 <vgb> selfissued: those are explicitly allowed, it's all valid CBOR and should just work
17:33:17 <vgb> ... RSA draft is on the fast track in IETF and should be ready for last call in Chicago later this month.
17:34:32 <vgb> ... if CTAP takes a dependency that will help argue for hurrying it up
17:35:20 <weiler> zakim, list participants
17:35:20 <Zakim> As of this point the attendees have been rbarnes, nadalin, weiler, rolf, wseltzer, battre, gmandyam, jcj_moz, JeffH, vgb, apowers, jyasskin, christiaan, alexei, alexei-goog,
17:35:23 <Zakim> ... kpaulh, jfontana, selfissued, Ketan
17:35:27 <weiler> rrsagent, draft minutes
17:35:27 <RRSAgent> I have made the request to generate http://www.w3.org/2017/03/15-webauthn-minutes.html weiler
17:36:00 <vgb> tony: there is also #362
17:37:21 <vgb> vgb: should this be a CTAP issue?
17:37:41 <vgb> ... from the pov of the wire protocol it's just a bunch of bits
17:38:28 <vgb> ... it is the application above webauthn that cares
17:40:17 <vgb> tony: issue #270. more about extensions, which are still hanging. what should we do?
17:40:48 <vgb> selfissued: will look at this after finishing IETF tasks
17:43:06 <vgb> tony: will still need to figure out where we want to go with extensions. not a lot of support from browser vendors for these in initial implementations, so should we hold up the core spec for them?
17:43:48 <vgb> selfissued: as long as we agree on the overall extension semantics, which specific extensions are supported is not important
17:44:25 <vgb> jeffh: extensions discussion is worse than california traffic
17:46:52 <vgb> alexei-goog: can we define extensions in the spec as a separable unit, and punt the discussion on whether to keep or remove?
17:47:09 <vgb> jeffh: that's how it is today
17:47:57 <vgb> ... in agreement that this is not the most burning issue
17:48:42 <vgb> tony: credential mgmt issue. we heard mkwst's view but not yet any follow up on the list
17:48:56 <vgb> jeffh: have some thoughts
17:49:03 <gmandyam> (Assuming I understand his suggestion correctly) - agree with alexei-goog, re: extensions
17:49:12 <vgb> jyasskin: believe there is a design proposal in progress
17:49:34 <vgb> jeffh: mkwst was hoping to get out a proposal before the call, so should be imminent
17:49:46 <vgb> ... he sent a note to the webappsec list
17:50:04 <weiler> weiler has joined #webauthn
17:50:12 <vgb> domenic: have written a draft but should be able to share by end of week
17:50:19 <battre> I'll use IRC
17:50:28 <battre> we have a draft that Mike wants to take another look tomorrow
17:50:47 <battre> should have something to share tomorrow or on Friday
17:50:54 <battre> <EOM>
17:51:08 <battre> Sounds good
17:51:22 <gmandyam> Re; credman - never received an answer to my question on the mailing list, https://lists.w3.org/Archives/Public/public-webauthn/2017Mar/0157.html
17:51:33 <vgb> tony: will put it on the agenda for next week, hope mkwst can attend
17:51:35 <battre> I don't know. I hope so
17:51:57 <weiler> rrsagent, draft minutes
17:51:57 <RRSAgent> I have made the request to generate http://www.w3.org/2017/03/15-webauthn-minutes.html weiler
17:53:27 <jyasskin> On the topic of strange things outside Google offices: http://boingboing.net/2014/07/25/on-google-campus-a-dinosaur-i.html
17:54:06 <battre> present-
18:02:36 <weiler> weiler has joined #webauthn
18:03:45 <weiler> trackbot, end meeting
18:03:45 <trackbot> Zakim, list attendees
18:03:45 <Zakim> As of this point the attendees have been rbarnes, nadalin, weiler, rolf, wseltzer, battre, gmandyam, jcj_moz, JeffH, vgb, apowers, jyasskin, christiaan, alexei, alexei-goog,
18:03:48 <Zakim> ... kpaulh, jfontana, selfissued, Ketan
18:03:53 <trackbot> RRSAgent, please draft minutes
18:03:53 <RRSAgent> I have made the request to generate http://www.w3.org/2017/03/15-webauthn-minutes.html trackbot
18:03:54 <trackbot> RRSAgent, bye
18:03:54 <RRSAgent> I see no action items