IRC log of wot-sec on 2023-10-30

Timestamps are in UTC.

12:58:59 [RRSAgent]
RRSAgent has joined #wot-sec
12:59:03 [RRSAgent]
logging to https://www.w3.org/2023/10/30-wot-sec-irc
13:00:24 [McCool]
McCool has joined #wot-sec
13:01:30 [kaz]
meeting: WoT Security
13:01:46 [kaz]
present+ Kaz_Ashimura, Jan_Romann, Luca_Barbato
13:02:56 [Mizushima]
Mizushima has joined #wot-sec
13:04:02 [JKRhb]
JKRhb has joined #wot-sec
13:04:06 [kaz]
present+ Michael_McCool, Tomoaki_Mizushima
13:04:47 [kaz]
agenda: https://www.w3.org/WoT/IG/wiki/IG_Security_WebConf#30_October_2023
13:06:47 [luca_barbato]
scribenick: luca_barbato
13:07:19 [kaz]
topic: Minutes
13:07:29 [kaz]
-> https://www.w3.org/2023/10/23-wot-sec-minutes.html Oct-23
13:07:33 [luca_barbato]
mm: No objections to approve the minutes?
13:07:38 [luca_barbato]
<none>
13:07:59 [luca_barbato]
topic: PR
13:09:04 [kaz]
q+
13:09:34 [McCool]
https://github.com/w3c/wot-usecases/pull/233
13:09:40 [luca_barbato]
mm: There are no PR for Security
13:09:48 [kaz]
-> https://github.com/w3c/wot-security/pulls no PR for wot-security
13:09:50 [McCool]
https://github.com/w3c/wot-usecases/issues/232
13:09:51 [luca_barbato]
mm: but there is a UseCases PR related
13:10:15 [kaz]
i/There are/subtopic: Security PRs/
13:10:31 [kaz]
i/232/subtopic: Use Cases PR/
13:10:38 [kaz]
s|https://github.com/w3c/wot-usecases/pull/233||
13:11:18 [kaz]
i|232|-> https://github.com/w3c/wot-usecases/pull/233 wot-use cases PR 233 - Template for Category/Risk org for Security Requirements|
13:11:44 [luca_barbato]
mm: We should look at the Categories in UseCases that touch Security
13:12:01 [kaz]
s|https://github.com/w3c/wot-usecases/issues/232|-">https://github.com/w3c/wot-usecases/issues/232|-> https://github.com/w3c/wot-usecases/issues/232 related wot-usecases Issue 232 - Create Security Categories for Use Cases|
13:12:08 [kaz]
rrsagent, make log public
13:12:12 [kaz]
rrsagent, draft minutes
13:12:13 [RRSAgent]
I have made the request to generate https://www.w3.org/2023/10/30-wot-sec-minutes.html kaz
13:12:21 [luca_barbato]
mm: I would explain better Public and Private to be more explanatory
13:12:32 [kaz]
chair: McCool
13:12:38 [luca_barbato]
mm: Public -> Public Services, Private -> Private Information
13:13:25 [luca_barbato]
the other categories are
13:13:38 [luca_barbato]
s/the other/mm: the other/
13:14:59 [luca_barbato]
mm: The other two categories: Safety-Critical, as per the SIFIS use-case, Business-Critical, misuse that can cause economic/reputation damages
13:20:48 [kaz]
q+
13:21:27 [luca_barbato]
mm: I plan to rework the Use Case sections as detailed in the related issue.
13:22:42 [luca_barbato]
q+
13:23:58 [kaz]
ack k
13:26:45 [kaz]
kaz: would be nice to align with the wide review viewpoints for WoT 2.0 specs, so would be good to have those viewpoints as part of the use case template
13:26:53 [kaz]
i/would be/scribenick: kaz/
13:28:14 [McCool]
https://github.com/w3c/wot-usecases/issues/234
13:30:16 [JKRhb]
q+
13:30:16 [luca_barbato]
mm: The categorization between Technical and Functional does not really fit well security
13:30:22 [luca_barbato]
ack l
13:30:41 [luca_barbato]
jkr: is it really required to make this distinction?
13:30:50 [kaz]
i|234|-> https://github.com/w3c/wot-usecases/issues/232#issuecomment-1785155284 McCool's comment on Issue 232|
13:31:16 [kaz]
s|https://github.com/w3c/wot-usecases/issues/234|-">https://github.com/w3c/wot-usecases/issues/234|-> https://github.com/w3c/wot-usecases/issues/234 related wot-usecases Issue 234 - Create Accessibility Categories for Use Cases|
13:32:02 [kaz]
i|The categorization|-> https://github.com/w3c/wot-usecases/issues/235 another related wot-usecases Issue 235 - Create Internationalization Categories for Use Cases|
13:32:14 [kaz]
rrsagent, draft minutes
13:32:16 [RRSAgent]
I have made the request to generate https://www.w3.org/2023/10/30-wot-sec-minutes.html kaz
13:33:01 [kaz]
i/The categorization b/scribenick: luca_barbato/
13:33:02 [kaz]
rrsagent, draft minutes
13:33:04 [RRSAgent]
I have made the request to generate https://www.w3.org/2023/10/30-wot-sec-minutes.html kaz
13:38:34 [kaz]
q?
13:39:10 [kaz]
ack j
13:40:12 [JKRhb]
scribenick: JKRhb
13:40:45 [JKRhb]
mm: I am going to finish the PR which we can discuss in more detail next week
13:40:53 [JKRhb]
... (adds a comment to the issue)
13:40:54 [McCool]
https://github.com/w3c/wot-usecases/issues/232#issuecomment-1785226125
13:41:09 [JKRhb]
... we can then finish the meeting early today
13:41:39 [JKRhb]
... my plan is now finishing the PR, doing the rest is more technical
13:41:51 [kaz]
s|https://github.com/w3c/wot-usecases/issues/232#issuecomment-1785226125|-">https://github.com/w3c/wot-usecases/issues/232#issuecomment-1785226125|-> https://github.com/w3c/wot-usecases/issues/232#issuecomment-1785226125 McCool's comments for wot-usecases Issue 232 based on today's discussion|
13:42:01 [JKRhb]
... then we can go through the remaining requirements and see which category they fall into
13:42:04 [kaz]
rrsagent, draft minutes
13:42:05 [RRSAgent]
I have made the request to generate https://www.w3.org/2023/10/30-wot-sec-minutes.html kaz
13:42:53 [JKRhb]
[adjourned]
13:43:05 [kaz]
rrsagent, draft minutes
13:43:06 [RRSAgent]
I have made the request to generate https://www.w3.org/2023/10/30-wot-sec-minutes.html kaz
16:01:49 [Zakim]
Zakim has left #wot-sec