2025-08-20 WebAppSec WG Agenda

Hey folks, apologies. I posted this to GitHub a week ago, and then entirely
forgot to send it to the mailing list as well:

Wednesday, August 20th: 16:00 UTC
<https://www.timeanddate.com/worldclock/fixedtime.html?iso=202508120T1600>
(09:00
California, 12:00 Boston, 17:00 London, 18:00 Berlin)
Draft Agenda
<https://github.com/w3c/webappsec/blob/main/meetings/2025/2025-08-20-agenda.md#draft-agenda>

   - Discussing w3c/webappsec-csp#736
   <https://github.com/w3c/webappsec-csp/issues/736> (@swijckmans)
   - Signature-based Integrity <https://wicg.github.io/signature-based-sri>
    (@mikewest)
      - Status update. Ready for PRs against SRI?
      - Inline Integrity <https://mikewest.github.io/inline-integrity/>
       interest?
   - Administrivia
      - Following up on CfCs for publication (@simoneonofri):
         - CfC to move CSP-3 to CR < 2025-07-16 #682
         <https://github.com/w3c/webappsec/issues/682>
         - CfC to move Fetch Metadata to CR < 2025-07-16 #681
         <https://github.com/w3c/webappsec/issues/681>
         - CfC to move SRI-2 to CR < 2025-07-16 #680
         <https://github.com/w3c/webappsec/issues/680>
         - CfC to move WebCrypto-2 to CR < 2025-07-16 #679
         <https://github.com/w3c/webappsec/issues/679>
         - CfC to publish Well-Known URL for Relying Party Passkey
         Endpoints as a FPWD < 2025-07-16 #678
         <https://github.com/w3c/webappsec/issues/678>
         - CfC to publish DBSC as a FPWD < 2025-07-12 #677
         <https://github.com/w3c/webappsec/issues/677>
      - TPAC?

If you would like to add an item to the agenda, please open a PR against this
document
<https://github.com/w3c/webappsec/blob/main/meetings/2025/2025-08-20-agenda.md>
Logistics
<https://github.com/w3c/webappsec/blob/main/meetings/2025/2025-08-20-agenda.md#logistics>

   - Minutes: https://pad.w3.org/p/WebAppSec_2025-08-20 (Use your W3C
   credentials)
   - Add these events
   <https://www.w3.org/groups/wg/webappsec/calendar#export> to your calendar
   - #webappsec on W3C's slack instance <https://w3ccommunity.slack.com/>
      - https://www.w3.org/slack-w3ccommunity-invite if you haven't already
      joined.
   - Zoom:
      - Details at
      https://auth.w3.org/?url=https://www.w3.org/groups/wg/webappsec/calendar


-mike