# Device APIs and Policy Working Group Teleconference ## 16 Feb 2011 [Agenda][3] See also: [IRC log][4] ## Attendees Present Anssi_Kostiainen, Robin_Berjon, Frederick_Hirsch, Dzung_Tran, jerome_giraud, cecile_Marc, Laszlo_Gombos, Harald_Alvestrand, Kyung-Tak_Lee, Suresh_Chitturi, Cathy_Chan, Rich_Tibbett Regrets Dom Chair Robin_Berjon, Frederick_Hirsch Scribe Anssi_Kostiainen ## Contents * [Topics][5] 1. [Administrative][6] 2. [Announcements, meeting planning, logistics][7] 3. [Minutes approval][8] 4. [Rechartering][9] 5. [Privacy][10] 6. [Sysinfo][11] 7. [Adjourn][12] * [Summary of Action Items][13] * * * Date: 16 February 2011 ### Administrative ScribeNick: AnssiK Scribe: Anssi_Kostiainen Seoul F2F and workshop planning please complete registration page, [http://www.w3.org/2002/09/wbs/43696 /seoul-f2f-reg/][14] ### Announcements, meeting planning, logistics fjh: everyone register to the f2f meeting ... for planning purposes we need to know if you're attending or not ... there's also a workshop in between on Thu ... we'll need to start f2f agenda planning ... please send proposals on the list ### Minutes approval Approve 9 February minutes [http://lists.w3.org/Archives/Public/public-device- apis/2011Feb/att-0077/minutes-2011-02-09.html][15] **RESOLUTION: Minutes from 9 February 2011 approved** ### Rechartering [http://www.w3.org/2010/11/DeviceAPICharter.html][16] Privacy, security deliverables? fjh: we have an issue for Charter draft, missing some explicit deliverables darobin: the simplest way would be to send the proposed changed to the list **ACTION:** fjh to propose charter changes related to security and privacy deliverables [recorded in [http://www.w3.org/2011/02/16-dap- minutes.html#action01][17]] Created ACTION-335 - Propose charter changes related to security and privacy deliverables [on Frederick Hirsch - due 2011-02-23]. suresh: is there a timeline for the Charter approval fjh: we should have a draft before f2f ... and approve at the f2f, but would need to check with Dom darobin: to be clear, it's not this group that approved the Charter, it's Advisory Committee decision AnssiK, you wanted to comment on Feature Permissions [http://dev.w3.org/2006/webapi/WebNotifications/publish/FeaturePermissions.htm l][18] [http://lists.w3.org/Archives/Public/public-web- notification/2010Nov/0001.html][19] +1 [http://www.chromium.org/developers/design-documents/desktop-notifications /api-specification][20] you mean [http://dev.w3.org/2009/dap/api-perms/][21] ? Feature Permissions was moving forward but we need to consider other aspects of security/privacy as well, so probably more than one spec to move forward +1 to progressing it lgombos: How the two [http://dev.w3.org/2006/webapi/WebNotifications /publish/FeaturePermissions.html][18] spec relates to [http://www.w3.org/TR /api-perms/][22] requestPermission(navigator.contact) requestPermission('navigator.contact') FWIW, that's not a great design. It's better to request permission on the actual object. It might not exist or all developers need to do: if(navigator.contact) { /* request permission*/ } **ACTION:** fjh to ask about sharing draft workshop agenda with WG [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action02][23]] Created ACTION-336 - Ask about sharing draft workshop agenda with WG [on Frederick Hirsch - due 2011-02-23]. AnssiK: i.e. pass either a reference, or a stringification of it laszlo: at the moment both specs assume strings ... reason for that is needs to be re-usable in the P&C [so, richt, Contacts implements RequestPermission?] darobin, possibly. that might work...maybe...perhaps. [if (navigator.contacts) navigator.contacts.requestPermission(success, error)?] :) laszlo: we'll need to figure out the dependency together with the WebNot WG just do navigator.contacts.find(). maybe permissions don't need to be codified and standardized at all? Laszlo: we could define a FeatureRequest interface, and the API implements that as per richt proposal window.webkitNotifications.checkPermission laszlo suggests [http://dev.w3.org/2006/webapi/WebNotifications/publish/ FeaturePermissions.html][18] could be approach for all APIs in DAP add to the Charter: "an API for web pages to request permission to use privileged user agent features" +1 robin: not all APIs, but perhaps for some richt: I'm still unsure about this whole are, if you want to do something you just do it ... not sure standardizing this is good, quite controversial still ... expect the Web Notifications stuff change a bit still laszlo: one of the design guidelines behind the current Feat Perms: decouple the feature request from the API invocation darobin: this is decoupled from the policy* ... I'm not sure if this applies to lots of other specs ... e.g. not very well to Contacts ... we should spec out what Web Not people need, at the minimum richt: requesting all permissions up-front, interesting scenario Chrome > Wrench > Preferences > Under the Hood > Content Settings... > Notifications fjh: we should agree that we'll probably need something in the Charter for Feature Permissions richt: Chrome has the same config UI for Location (Geolocation API) ... would like to document the diff to Notifications my question is what does a permissioning interface give us on top of how geolocation (in Chrome Preferences) currently works? If we have solid use cases beyond those already implemented for geolocation then we're motoring :) laszlo: I'm taking an action on this and catch up with John Gregg **ACTION:** Laszlo to find out about current status of permissions/notifications with John Gregg [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action03][24]] Created ACTION-337 - Find out about current status of permissions/notifications with John Gregg [on Laszlo Gombos - due 2011-02-23]. darobin: multiple permissions UC, support on that? laszlo: +1 **ACTION:** Laszlo to look into multiple permission/installable designs for APIs [recorded in [http://www.w3.org/2011/02/16-dap- minutes.html#action04][25]] Created ACTION-338 - Look into multiple permission/installable designs for APIs [on Laszlo Gombos - due 2011-02-23]. laszlo: another related action, go though the existing DAP APIs and see if Feat Perms works with them ... I'm happy taking that action as well **ACTION:** Laszlo to go through existing DAP APIs to see if there are use cases there for Feat Perms (or if the existing approaches work better) [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action05][26]] Created ACTION-339 - Go through existing DAP APIs to see if there are use cases there for Feat Perms (or if the existing approaches work better) [on Laszlo Gombos - due 2011-02-23]. richt: can we also look into the use cases, as described above? darobin: any takers for use cases action? strong solid use cases will sell the proposal if it adds value on top of what we already have without permisioning interfaces. darobin: perhaps an issue for UCs is ok? ISSUE: We need solid use cases for Feat Perms if it's going to fly Created ISSUE-109 - We need solid use cases for Feat Perms if it's going to fly ; please complete additional details at [http://www.w3.org/2009/dap/track/issues/109/edit][27] . ### Privacy fjh: other than cdt folks involved with privacy? need to move privacy work forward darobin: privacy by design, relationship of rulesets with DoNotTrack proposal **ACTION:** Frederick to look at how we're doing privacy by design [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action06][28]] Created ACTION-340 - Look at how we're doing privacy by design [on Frederick Hirsch - due 2011-02-23]. richt: I agree with darobin, privacy should be baked into the API design ... proposing privacy papers should end up being W3C Notes fjh: do not track, secondary use, retention require some thought ... might apply across all the APIs richt: all the APIs should consider all those points individually fjh: understanding privacy by design is important, there may be privacy deliverables richt: we may want to put W3C Note deliverables into "Other Deliverables" section in the Charter ### Sysinfo darobin: Bryan's not on the call, so perhaps not good idea to discuss SysInfo ### Adjourn ## Summary of Action Items **[NEW]** **ACTION:** fjh to ask about sharing draft workshop agenda with WG [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action02][23]] **[NEW]** **ACTION:** fjh to propose charter changes related to security and privacy deliverables [recorded in [http://www.w3.org/2011/02/16-dap- minutes.html#action01][17]] **[NEW]** **ACTION:** Frederick to look at how we're doing privacy by design [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action06][28]] **[NEW]** **ACTION:** Laszlo to find out about current status of permissions/notifications with John Gregg [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action03][24]] **[NEW]** **ACTION:** Laszlo to go through existing DAP APIs to see if there are use cases there for Feat Perms (or if the existing approaches work better) [recorded in [http://www.w3.org/2011/02/16-dap-minutes.html#action05][26]] **[NEW]** **ACTION:** Laszlo to look into multiple permission/installable designs for APIs [recorded in [http://www.w3.org/2011/02/16-dap- minutes.html#action04][25]] [End of minutes] * * * Minutes formatted by David Booth's [scribe.perl][29] version 1.135 ([CVS log][30]) $Date: 2009-03-02 03:52:20 $ [1]: http://www.w3.org/Icons/w3c_home [2]: http://www.w3.org/ [3]: http://lists.w3.org/Archives/Public/public-device- apis/2011Feb/0095.html [4]: http://www.w3.org/2011/02/16-dap-irc [5]: #agenda [6]: #item01 [7]: #item02 [8]: #item03 [9]: #item04 [10]: #item05 [11]: #item06 [12]: #item07 [13]: #ActionSummary [14]: http://www.w3.org/2002/09/wbs/43696/seoul-f2f-reg/ [15]: http://lists.w3.org/Archives/Public/public-device- apis/2011Feb/att-0077/minutes-2011-02-09.html [16]: http://www.w3.org/2010/11/DeviceAPICharter.html [17]: http://www.w3.org/2011/02/16-dap-minutes.html#action01 [18]: http://dev.w3.org/2006/webapi/WebNotifications/publish/FeaturePermissions.html [19]: http://lists.w3.org/Archives/Public/public-web- notification/2010Nov/0001.html [20]: http://www.chromium.org/developers/design-documents/desktop- notifications/api-specification [21]: http://dev.w3.org/2009/dap/api-perms/ [22]: http://www.w3.org/TR/api-perms/ [23]: http://www.w3.org/2011/02/16-dap-minutes.html#action02 [24]: http://www.w3.org/2011/02/16-dap-minutes.html#action03 [25]: http://www.w3.org/2011/02/16-dap-minutes.html#action04 [26]: http://www.w3.org/2011/02/16-dap-minutes.html#action05 [27]: http://www.w3.org/2009/dap/track/issues/109/edit [28]: http://www.w3.org/2011/02/16-dap-minutes.html#action06 [29]: http://dev.w3.org/cvsweb/~checkout~/2002/scribe/scribedoc.htm [30]: http://dev.w3.org/cvsweb/2002/scribe/