14:05:11 <RRSAgent> RRSAgent has joined #wot-sec
14:05:15 <RRSAgent> logging to https://www.w3.org/2023/11/13-wot-sec-irc
14:05:45 <kaz> meeting: WoT Security
14:06:08 <kaz> present+ Kaz_Ashimura, Michael_McCool, Mahda_Noura, Tomoaki_Mizushima
14:06:30 <mahda-noura> mahda-noura has joined #wot-sec
14:06:38 <kaz> agenda: https://www.w3.org/WoT/IG/wiki/IG_Security_WebConf#13_November_2023
14:06:45 <mahda-noura> present+ Mahda_Noura
14:07:24 <mahda-noura> ScribeNick: mahda-noura
14:07:44 <mahda-noura> Chair: Michael McCool
14:08:44 <mahda-noura> Topic: Minutes
14:09:00 <kaz> -> https://www.w3.org/2023/10/30-wot-sec-minutes.html Oct-30
14:09:00 <mahda-noura> mccool: any objection to the minutes?
14:09:04 <mahda-noura> (none)
14:09:31 <mahda-noura> Topic: Use cases
14:09:39 <luca_barbato> luca_barbato has joined #wot-sec
14:10:00 <mahda-noura> mmcool: the use cases are renamed
14:10:45 <mahda-noura> ...rather having public and private there will be more categories, the threats are added
14:11:00 <mahda-noura> ...the requirements are about mitigation and threats are motivating
14:11:12 <mahda-noura> ...a given threat can have more than one mitigation
14:11:27 <mahda-noura> ...some mitigations can also apply to more than one threat
14:11:45 <kaz> i|the use cases|subtopic: PR 233|
14:11:55 <kaz> i|the use cases|-> https://github.com/w3c/wot-usecases/pull/233 PR 233 - Template for Category/Risk org for Security Requirements|
14:12:01 <kaz> rrsagent, make log public
14:12:05 <kaz> rrsagent, draft minutes
14:12:07 <RRSAgent> I have made the request to generate https://www.w3.org/2023/11/13-wot-sec-minutes.html kaz
14:12:14 <mahda-noura> ...on parallel have been working on discovery
14:12:30 <mahda-noura> ...Jan is working on the discovery section
14:13:02 <kaz> -> https://github.com/w3c/wot-usecases/pull/242 PR 242 - Associate Discovery Requirement with Use Cases
14:13:23 <mahda-noura> ...the links in the security and privacy will be updated to have a similar structure to the discovery document
14:14:14 <mahda-noura> ...how should we deal with privacy?
14:15:21 <mahda-noura> ...if we do seperate sections then we have some repitions
14:15:31 <kaz> q+
14:15:52 <mahda-noura> mahda: security and privacy together would be better because of avoidance of redundance
14:18:44 <kaz> ack k
14:19:05 <mahda-noura> kaz: there are several potential categories and structures for use case descriptions, and having seperate security and privacy specific sections...securtiy and privacy from a W3C viewpoints. Maybe we could have use case section and requirement section.
14:20:00 <mahda-noura> kaz: if we concentrate on the question of seperate sections, I think they should be seperate
14:20:10 <mahda-noura> ...eventhough they are related to each other
14:20:22 <kaz> s/eventhough/even though/
14:20:30 <mahda-noura> mm: I am anticipating we will have a pain point, and we have to cross reference
14:21:06 <mahda-noura> ...we could have access control as requirement, the requirement can then cite both security and privacy
14:21:41 <mahda-noura> ...other requirements like deletion is related to only privacy
14:22:04 <mahda-noura> kaz: protecting privacy requires security mechanisms
14:22:25 <mahda-noura> ...how and when to access what kind of data and when and where
14:22:36 <mahda-noura> ...technically two different kinds of requirements
14:24:02 <mahda-noura> mm: I will try to split them into two sections
14:24:58 <mahda-noura> https://github.com/w3c/wot-usecases/pull/233
14:25:29 <mahda-noura> mm: mccool will try to improve the document
14:25:44 <mahda-noura> mm: is there anything pressing that we should do?
14:25:58 <kaz> rrsagent, draft minutes
14:25:59 <RRSAgent> I have made the request to generate https://www.w3.org/2023/11/13-wot-sec-minutes.html kaz
14:26:08 <mahda-noura> mm: the interest group asked for 2 months extension, at some point we need to think about whether we need to do something special for security
14:26:29 <kaz> i|PR 242|subtopic: PR 242|
14:26:30 <kaz> rrsagent, draft minutes
14:26:31 <RRSAgent> I have made the request to generate https://www.w3.org/2023/11/13-wot-sec-minutes.html kaz
14:28:03 <kaz> s|subtopic: PR 242||
14:28:08 <kaz> [adjourned]
14:28:10 <kaz> rrsagent, draft minutes
14:28:12 <RRSAgent> I have made the request to generate https://www.w3.org/2023/11/13-wot-sec-minutes.html kaz