Substitute minutes of W3C Web Authn meeting 26-Sep-2018

#webauthn: (no topic set)
[11:00] == jfontana [~jfontana@public.cloak] has joined #webauthn
[11:01] <elundberg> present+
[11:01] <jeffh> present+
[11:04] <plh_>
https://lists.w3.org/Archives/Member/chairs/2018JulSep/0139.html
[11:04] <jeffh> invite zakim?
[11:04] <jfontana> Tony: philippe is on and will fill us in
[11:04] <jfontana> PLH: we looked at reuest and we have a few questionsa nd
maybe one major concner.
[11:04] <jfontana> ...first is the one that could be major, it is about the
extensions.
[11:05] <jfontana> ...understanding we when yo moved to CR if any
extensions would be dropped or made informative.
[11:05] <jfontana> ...they were kept as optional
[11:05] <jfontana> tony: let me address. Giri is pulling together set of
arguments for arguments.
[11:06] <jfontana> ...that will be presentedat the TPAC timeframe.
[11:06] <jfontana> ...we will argue all the extensions should be informal
and optional
[11:06] <jfontana> ..we beoieve we have basis of argument
[11:06] <jfontana> plh: hav eot have a  phone call wit the director.
[11:06] <jfontana> ...it sould help to organize a phone call on that.
[11:06] <jfontana> ...the other ones are not as critical
[11:07] <jfontana> ...we notice that the spec is using an IETF draft for
token binding.
[11:07] <jfontana> .we did see the email from the chair of that group, but  we
don't know the status
[11:07] <jfontana> self-issue: they are RFC , with the editor and expect
them in days.
[11:08] <jfontana> plh: you have said enough, we believe you
[11:08] <jfontana> ...tahnk you
[11:11] <jfontana> ...the next question was, want improvement of working on
slight way we talk about what issue gaining or losing focus on document,
change is paragraph issue in 5.6 of spec.
[11:11] <jfontana> ...say the  issue will be updated.
[11:11] <jfontana>  self-issue: fine for you to do that
[11:11] <jfontana> tony:it is editorial change.
[11:11] <jfontana> plh
[11:12] <jfontana> plh: we address lot of issues that are in edtiiors draft
, update those links to the current draft.
[11:12] <jfontana> ...if there are any links that would become broken in
the operation we will come back to you , OK?
[11:12] <jfontana> tony: good to me
[11:12] <jfontana> plh: build consistencies in your references.
[11:13] <jfontana> ...last point is interop report.
[11:13] <jfontana> ...we received  this information. we looked  at it and
we had some tests in wpt  on web auth and most of those are failing. are
those tests relevant.
[11:14] <jfontana> tony: this is the interop. getting it green for Edge vs.
the red status
[11:14] <jfontana> akshay: adam's list.
[11:14] <plh_> https://wpt.fyi/results/webauthn?label=stable&aligned=true
[11:14] <jfontana> ?
[11:14] <jfontana> tony: answer is they will not fail. we are updating.
[11:15] <jfontana> ...we will update the matrix for the test that failed
[11:15] <jfontana> plh: ok. it would be nice to have to updates done when
we talk to the director.
[11:16] <jfontana> ...i tried to run all those tests and I was able to get
into green, we thought the tests may not have been run properly.
[11:16] <jfontana> skshay: which link are you talking about, which test
[11:16] <jfontana> plh: I put the link in IRC
[11:16] <jfontana> ...we need to run these tests.
[11:17] <jfontana> tony: this may also have to do on how we are running the
tests.
[11:17] <jfontana> ...we should have a phone call and pull in Adam.
[11:17] == john_bradley [~john_bradley@public.cloak] has joined #webauthn
[11:17] <jfontana> plh: can you generate a repo to look at the conditions
when red, when green
[11:17] <jfontana> ...so this is it.
[11:18] <jfontana> ...we need phone call to talk about the extensions.
[11:18] <jfontana> ...mike jones, sam, giri, co-chairs,
[11:18] <jfontana> ..and maybe jeeH
[11:18] <jfontana> jeffH: sure.
[11:18] <jfontana> plh: timeline?
[11:18] <jfontana> tony: we would like to have this by next week some time.
[11:19] <jfontana> ..i need a few days to talk to giri.
[11:19] <jfontana> plh: OK
[11:19] <jfontana> tony: talking next week.
[11:20] <jfontana> jfontana: monday, tues. wed.
[11:20] <jfontana> ...days we need to do it.many headed to FIDO plenary
[11:20] <jfontana> tony: and we have issues with the tests.  we should have
a separate call with Adam
[11:21] <jfontana> ...let me talk to adam
[11:21] <jfontana> maybe we don't need a call.
[11:21] <jfontana> ...we will tried to get this cleared up next week
[11:22] <jfontana> plh: yes
[11:24] <jeffh> https://github.com/w3c/webauthn/pull/1082
[11:24] <jfontana> emil: JeffH are you suggesting we restructure the
algorithm step? or is it a counter issue?
[11:25] <jfontana> ...the server might have already identified the user, or
not.
[11:25] <jfontana> jeffH: it is just the terms that I am concerned about.
[11:26] <jfontana> emil: not sure how to get around owner / user
[11:26] <jfontana> jeffH: the term identified, we don't have that notion
defined. don't know what account is being used.
[11:26] <jfontana> ...it is RP specific.
[11:27] <jfontana> ...the term identified. did we mean user verification.
no.
[11:28] <jfontana> emil (elundberg): you could have the request  refer to
values that were used in the request
[11:28] <jfontana> jeffH: there is not  a step to verify the credential
source..
[11:28] <jfontana> ...we need steps for the RP on creation.
[11:29] == plh_ has changed nick to plh
[11:30] <jfontana> ...one could argue we punt this to level 2
[11:30] <jfontana> elundberg: it wold be a technical issue
[11:30] <jfontana> JeffH: i will try to propose tech today.
[11:31] <elundberg> s/tech/text/
[11:31] <jfontana> agl: the HMAC secret extension did you use hypen or
underscore
[11:31] <jfontana> akshay: have not seen hypen before, but it looks like it
is supported
[11:32] <jfontana> agl: I think we will support it.
[11:32] <jfontana> akshay: it is a hypen.
[11:32] <jfontana> agl: also #1050 I updated it, it is transports in
registrations
[11:33] <jfontana> akshay: i think this looks fine, let me look at it.


-- 

John Fontana

Identity and Standards Analyst | Yubico <http://www.yubico.com/>

Phone: +1 303 301 4437
Skype: j_fontana