PING teleconference - 29 November - notes

Thank you everyone for joining the PING teleconference today, and in particular, thank you to our guests Philippe and Sergey from the Distributed Tracing Working Group.

We had a very fruitful discussion concerning the privacy considerations of Trace Context.

You can find the draft minutes here: https://www.w3.org/2018/11/29-privacy-minutes.html


—— 

Some brief notes from the call

=> 1. Trace Context

Link to Editor’s Draft: https://w3c.github.io/trace-context/ 

Actions:

- Sergey will raise an issue concerning potential cross-origin privacy considerations if headers are sent in HTTP responses, or expected to persist across HTTP request and response pairs.

- The WG could consider the idea of auditing the information in trace headers (e.g. to ensure it does not include personal data or sensitive personal data). 

=> 2. Update on Self Review Questionnaire: Security and Privacy

Jason Novak has been added as editor (for PING).

Jason and Lukasz Olejnik have merged the PING edits up to “mitigations" into the TAG. Lukasz has reviewed these.

Feedback from the TAG is that it would be helpful to split the document (now that it longer). Jason and Lukasz will approach this feedback after all the PING edits have been incorporated.

Next steps: 

- Jason and Lukasz will work together to merge the edits to “mitigations" and Lukasz’s comments. 
- Jason, Christine and Sam will start deprecating superseded PING privacy guidance drafts

=> 3. Private browsing

It would be useful to restart discussions around private browsing in PING. 

Some ideas: 

- sharing views on whether the client should advertise whether it is in private mode or not (note: there are views on both sides), and if yes, how
- examining requirements for specifications when the client is in private browsing mode
- mapping different private browsing modes
- [insert your own idea]

If you are interested in exploring this area, we will be having an ad-hoc PING call next week on Thursday UTC 17. Please join us. Call details following in a separate email.

=> 4. Next PING teleconference

20 December 2018 - UTC 17

Christine (co-chair)

Received on Friday, 30 November 2018 00:01:33 UTC