IG Security WebConf/2019
Agendas from WoT Security TF from 2019
Dec 16, 2019
- Meeting schedule
- No Meetings: Dec 23, Dec 30
- Tentative: Jan 6, Jan 13
- Review Minutes:
- Review of Lifecycle discussion in Architecture
- PRs and Issues
- AOB
Dec 9, 2019
Cancelled - meeting slot needed to finalize PRs.
Nov 25, 2019
Cancelled - multiple conflicts.
Nov 18, 2019
- WG Charter finalization
- Quick updates
- IETF Hackathon and Workshop - Discovery
- Discovery proposal draft
- Review Minutes
- Issues and PRs
- AOB
Nov 11, 2019
Nov 5, 2019
- Introductions
- Quick updates
- Review Minutes
- Sept 9, 2019 - Already approved
- Oct 14, 2019
- Oct 21, 2019
- Time choice
- Publication status
- Issues and PRs
- AOB
Sept 9, 2019
- Quick updates
- Review Minutes
- Definitions PR in Architecture
- WG Charter Draft Round 2
- Profile
- TPAC F2F Planning
- Issue tracker
- AOB
Sept 2, 2019
- Quick updates
- Review Minutes
- Rescheduling
- Doodle
- 7pm-8pm Japan Time works for everyone but Taki
- WG Charter Draft
- Issue tracker and PR review
- AOB
Aug 26, 2019
- Quick updates
- Michael is relocating
- to Atlantic Canada
- Altantic Time: Eastern - 1
- Michael is relocating
- Review Minutes
- Rescheduling
- Options: Monday 6pm, 7pm JST, Tuesday 7pm, 8pm, 9pm JST
- Monday strongly preferred by Kaz and Mizushima
- Kaz to create a doodle
- Issue tracker and PR review
- AOB
Aug 5, 2019
- Quick updates
- Meeting with Sam Weiler at IETF
- Review minutes
- Publication status
- Issue tracker and PR review
- TODO status
- Review https://github.com/w3c/wot-security/pull/137 - McCool
- see also below
- AOB
July 8, 2019
- Quick Updates
- Meeting Schedule
- Review Minutes
- Publication Status
- Kaz to push through on updated Note this week
- PRs
- TODO
- Add end-of-life state to Lifecycle diagram - McCool
- Resolve proxy/intermediary terminology choice - McCool
- https://github.com/w3c/wot-security/issues/135 - McCool - review in main call or TF calls
- https://github.com/w3c/wot-security/issues/136 - McCool - review in main call or TF calls
- Reviews
- McCool to coordinate reviewers and review schedule
- AOB
June 10, 2019
- Quick Updates
- PRs
- TO DO
- "Security and Privacy Considerations" -> "Security and Privacy Guidelines"
- Terminology issues and updates
- Review
- Feedback review
- Update to security section of Architecture document
- AOB
June 3, 2019
Cancelled due to workshop
May 27, 2019
Cancelled due to conflicts
May 20, 2019
- Review of Minutes from earlier meetings
- Quick Updates
- Reviews
- Schedule
- Name change
- "Security and Privacy Considerations" -> "Security and Privacy Guidelines"
- Issues and PRs
- AOB
May 6, 2019
- Review of Minutes from earlier meetings
- Quick Updates
- CTA/NIST for Workshop (declined)
- Review progress
- Updates to TD and Arch specs
- Remove direct refs to Best Practices and Testing docs
- Issues and PRs
- AOB
April 29, 2019
- Review of Minutes from earlier meetings
- Quick updates
- Review progress
- Let's target May 8 now...
- Gives us one week to update things before May 15 CR target
- Publication schedule
- After CR in mid-May, edit Security Docs for consistency
- Updated Note published in mid-June; can update when go to REC.
- Should publish Best Practices and Testing Plan as Notes
- Want to cite "latest" version in Arch document, not dated version
- Target May 8 as meeting to have "publication resolution"
- Go to publication immediately afterwards
- Penetration testing planning
- McCool updating code and system description for Workshop demos
- System description for pen test done by May 15
- Will be travelling to IIC workshop May 17-23
- Penetration testing target: May 30
- Issues and PRs
- AOB
April 22, 2019
Cancelled due to holiday.
April 15, 2019
- New (WIP) Security Questionnaire
- Review progress
- Review of Minutes from earlier meetings
- https://www.w3.org/2019/01/14-wot-sec-minutes.html
- https://www.w3.org/2019/02/11-wot-sec-minutes.html
- https://www.w3.org/2019/02/18-wot-sec-minutes.html
- https://www.w3.org/2019/02/25-wot-sec-minutes.html
- https://www.w3.org/2019/03/04-wot-sec-minutes.html
- https://www.w3.org/2019/03/18-wot-sec-minutes.html
- https://www.w3.org/2019/03/25-wot-sec-minutes.html
- https://www.w3.org/2019/04/01-wot-sec-minutes.html
- Penetration testing planning
- Next: McCool to write system description
- Issues and PRs
- AOB
April 8, 2019
- CANCELLED due to AC Meeting
April 1, 2019
- Minute review
- Deferred again, Elena can't join
- CR Transition preparations
- Implementation experience for TD
- What else can we do?
- Security scheme extensions
- Review recent update to TD
- Penetration testing
- Reschedule given change to CR dates
- Architecture and TD spec changes
- Security and Privacy Considerations
- AOB
Mar 25, 2019
- TAG Submission review
- Security questionnaire
- Security and Privacy Considerations
- WoT Architecture
- WoT Thing Description
- Review of minutes from previous meetings
- AOB
Mar 18, 2019
- Review of minutes from previous meetings
- CTA/NIST Questionnaire review
- Testing status, explainers, and extensions
- Security consideration in WoT Arch doc
- AOB
Mar 11, 2019
- Review of minutes from previous meetings
- Pen Test Planning
- Docs
- Arch
- Best Practices
- Reviews
- PRs
- TD Testing
- AOB
Mar 4, 2019
- Review of minutes from previous meetings
- Deferred again since Kaz is not available
- Pen Test Planning
- Best Practices Doc
- AOB
Feb 25, 2019
- No (real) meeting
Feb 18, 2019
- Review of minutes from previous meetings
- Deferred to next meeting
- External reviews
- Found one external reviewer (IIC), two W3C reviewers (Web Security)
- Question about formal requirements
- IIC/OpenFog report
- Security conferences
- See email from Dave Raggett on mailing list
- Security sections related to runtime
- Scripting API doc
- Architecture doc
- Issue about "runtime" vocabulary
- PR on Testing (ITU vocabulary change)
- Best practices
- McCool to do PR to update, get into minimally-publishable form
- AOB
Feb 11, 2019
- Things we have to do:
- Security section of Arch and Scripting document
- TD Implementation Report - sample implementations
- Security Best Practices document
- Document reviews
- Testing experience - penetration testing
- Focus on Intel implementations, on McCool's private network
- When: Second week of March
- Security section of Scripting API
- Other business
Feb 4, 2019
No meeting, Travelling.
Jan 28, 2019
No meeting, TestFest.
Jan 14, 2019
- Review of minutes from previous meetings
- Security Testing Plan
- Security Best Practices
- F2F Planning
- Other
Jan 7, 2019
- Review of minutes from previous meetings
- F2F Planning
- Proposed sessions
- Deliverables
- Testing and Validation Goals
- PRs
- Issues
- Other