15:49:43 <RRSAgent> RRSAgent has joined #wpwg-spc
15:49:43 <RRSAgent> logging to https://www.w3.org/2021/10/04-wpwg-spc-irc
15:49:49 <Ian> Meeting: SPC Task Force
15:49:49 <Ian> Chair: Ian
15:49:49 <Ian> Scribe: Ian
15:50:03 <Ian> Agenda: https://lists.w3.org/Archives/Public/public-payments-wg/2021Sep/0020.html
15:50:09 <Ian> agenda+ Preparing for remote meeting
15:50:12 <Ian> agenda+ Issue review
15:50:14 <Ian> agenda+ Next meeting
15:58:32 <Ian> present+
16:00:46 <Ian> present+ Anne_Pouillard
16:00:52 <Ian> present+ Susan_Pandy
16:02:18 <Anne> Anne has joined #wpwg-spc
16:03:41 <Ian> present+ Stephen_McGruer
16:04:21 <Ian> present+ John_Bradley
16:04:33 <Ian> zakim, take up item 1
16:04:33 <Zakim> agendum 1 -- Preparing for remote meeting -- taken up [from Ian]
16:04:39 <Ian> present+ Werner_Bruinings
16:05:10 <Ian> https://github.com/w3c/webpayments/wiki/Agenda-TPAC2021
16:05:33 <werner> werner has joined #wpwg-spc
16:07:51 <Ian> What topics to bring forward?
16:08:02 <Ian> John: WebAuthn has competing opinions on cross-origin.
16:09:11 <Ian> ...what is the mechanism by which the relying party mints a credential so that it may later be used cross-origin.
16:09:22 <Ian> ...what we have now is suitable for an experiment but is probably not the right long-term solution
16:09:39 <Ian> ...at least being able to use these cross-origin credentials cross-browser.
16:09:49 <Ian> ...also enabling these credentials on roaming authenticators would be good
16:10:55 <Ian> https://github.com/w3c/secure-payment-confirmation/issues
16:12:50 <Ian> For issue 128, one question is whether user activation required for FIDO/SPC on registration
16:13:26 <Ian> John: Is this user activation coming from a particular browser behavior?
16:13:46 <Ian> Stephen: The concern with cross-origin credential is for any iframe creating a tracking credential
16:14:00 <Ian> ...just because it can come from an iframe it's not unreasonable to request a user activation
16:14:18 <Ian> John: SPC doesn't specifically deal with cross-origin create; that's a webauthn thing
16:14:36 <Ian> Stephen: But SPC does allow cross-origin create (on Chrome)
16:16:15 <Ian> [Discussion of WebAuthn cross-origin registration in iframe]
16:27:27 <Ian> zakim, close item 1
16:27:27 <Zakim> agendum 1, Preparing for remote meeting, closed
16:27:28 <Zakim> I see 2 items remaining on the agenda; the next one is
16:27:28 <Zakim> 2. Issue review [from Ian]
16:27:28 <Ian> zakim, close item 2
16:27:29 <Zakim> agendum 2, Issue review, closed
16:27:29 <Zakim> I see 1 item remaining on the agenda:
16:27:29 <Zakim> 3. Next meeting [from Ian]
16:27:35 <Ian> zakim, take up item 3
16:27:35 <Zakim> agendum 3 -- Next meeting -- taken up [from Ian]
16:27:40 <Ian> 18 October
16:28:02 <Ian> rrsagent, make minutes
16:28:02 <RRSAgent> I have made the request to generate https://www.w3.org/2021/10/04-wpwg-spc-minutes.html Ian