PING - informal chairs summary - 28 August 2014

PING - informal chairs’ summary – 28 August 2014

Please note that our next meeting will be on 2 October 2014 at the usual time.

Thank you again to Nick Doty for acting as scribe.


=> Privacy considerations

Nick Doty has been undertaking some research into existing “privacy considerations” text in recommendations track specifications. Initial research indicates that about 20% of specifications now include this section. Nick will shortly circulate the results of his research.

In the meantime, here is a link to Nick’s analysis so far:

https://npdoty.name/tr-analysis/graphs/tr-list.html

Action items:

Frederick Hirsch will propose an update to ReSpec for privacy and security considerations support.

PING chairs will then discuss with the Security Interest Group chairs whether specifications should have combined or separate privacy and security consideration sections.

Informal task force (and everyone): Continue work on the document [1]


=> Update regarding SPA [2]

Frank Dawson advised that he submitted the Specification Privacy Assessment (SPA) approach to OASIS and ISO. OASIS advised that it was not scope of their work. ISO adopted it as a standing document.


=> Updates regarding privacy reviews

Waiting for a written summary of Joe Hall’s meeting at IETF regarding WebRTC.

The following privacy reviews are pending:

- IndieUI: User Context 1.0 [3] (Joe and Katie)

- Encrypted Media Extensions [4] (Wendy + volunteers)

- MediaStream Recording [5] (Katie)

Many thanks to Joe, Katie and Wendy for taking these on.


=> PING @ TPAC

PING has a room at TPAC on Friday 31 October 2014.

PING chairs are also exploring the possibility of a breakout session during the plenary on Wednesday 29 October 2014, as well as a discussion with other WG chairs.

Please provide suggestions for the agenda on Friday and for a breakout session

Wendy Seltzer to propose TPAC review group "office hours" or hallway tables for future TPACs.

Please remember to register for TPAC:

https://www.w3.org/2002/09/wbs/35125/TPAC2014/


=> Information about some upcoming privacy meetings

NIST will be holding the 2nd Privacy Engineering Workshop [6] in San Jose, California on 15-16 September 2014.

The European Data Protection Supervisor (EDPS) has established the Internet Privacy Engineering Network (IPEN). The first IPEN workshop [7] will be held in Berlin, Germany on 26 September 2014. Frank Dawson will be attending.


=> Updates on some W3C work

The Web Application Security Working Group produced a W3C First Public Working Draft - Referrer Policy [8] . 

The abstract states: "This document describes how an author can set a referrer policy for documents they create, and the impact of such a policy on the referer HTTP header for outgoing requests and navigations.”

It may be useful for PING members to see how this specification might be used to achieve privacy objectives.

The Web and Mobile Interest Group has published a Group Note - Wake Lock: Use Cases [9]

It may be helpful to look at the requirements because even though they are not marked as “privacy requirements”, there are requirements that are intended to give the user agent (and user) control (which is an aspect of privacy).


=> Next meeting – 2 October 2014 at the usual time


Christine and Tara


[1] https://w3c.github.io/privacy-considerations/

[2] http://yrlesru.github.io/SPA/

[3] http://www.w3.org/TR/2014/WD-indie-ui-context-20140626/

[4] http://www.w3.org/TR/encrypted-media/

[5] http://dev.w3.org/2011/webrtc/editor/MediaRecorder.html

[6] http://www.nist.gov/itl/csd/privacy-engineering-workshop-september-15-16-2014.cfm

[7] https://secure.edps.europa.eu/EDPSWEB/webdav/site/mySite/shared/Documents/EDPS/IPEN/14-08-14_IPEN_workshop_practical_information_EN.pdf

[8] https://w3c.github.io/webappsec/specs/referrer-policy/published/2014-08-07-REFERRER-FPWD.html

[9] http://www.w3.org/TR/wake-lock-use-cases/

Received on Tuesday, 2 September 2014 03:52:32 UTC