Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rechartering Web Payment Security IG with no changes #365

Closed
ianbjacobs opened this issue Dec 13, 2022 · 15 comments
Closed

Rechartering Web Payment Security IG with no changes #365

ianbjacobs opened this issue Dec 13, 2022 · 15 comments

Comments

@ianbjacobs
Copy link

ianbjacobs commented Dec 13, 2022

Proposal to recharter an IG with no changes to the charter.

Charter Review

Web Payment Security Interest Group Charter

What kind of charter is this?

  • Existing IG recharter (with no changes)

Where would charter proponents like to see issues raised? (this strategy funnel issue, a different github repo, email, ...): member-wpsig@w3.org

@ruoxiran
Copy link

Lionel from APAWG will review this charter. @lwolberg

@himorin
Copy link

himorin commented Dec 26, 2022

No comment nor request from i18n

@ianbjacobs
Copy link
Author

Thank you!

@ianbjacobs
Copy link
Author

@lwolberg and @ruoxiran,

Thank you for reviewing the charter for APAWG. Would it be possible to complete the review by 6 January? Thank you,
Ian

@ianbjacobs
Copy link
Author

Hi @lwolberg and @ruoxiran,

I anticipate requesting the start of Member review of the charter on 13 January. I welcome any review you have of the (unchanged) charter by 5pm UTC on 12 January. If it is not possible to have a review by that time, and if you see substantive issues that need to be addressed while the Member review is ongoing, please let me know here. Thank you,
Ian

@ruoxiran
Copy link

Hi Ian, sorry for the delay, Lionel promised to end the review today. see minutes.

@lwolberg
Copy link

APAWG supports this Web Payment Security Interest Group (WPSIG) rechartering with the following comment:

WPSIG may already feel they are discussing accessibility, and APA did not track each WPIG meeting. However, APA noted that the WPSIG's first deliverable explicitly excluded accessibility from its scope. [1]

APAWG, as we are sure you can understand, is concerned with the accessibility anti-pattern where accessibility is left to late in the requirements and development process. While accessibility is indeed as you note, "part of any technology development process" [1], we feel that payment security is even more nuanced and challenging when users are people with disabilities who may be hampered by a lack of accessibility and dependent on assistance by assistive technology and, even, human caretakers. Keep in mind that a web payment may be more critical for a person with disabilities, yet harder to complete securely.

We also agree that APAWG in general does not comment on low level specifications that have no direct user experience. This working group probably feels that most of its discussions are low-level. However, we remind WPSIG of the critical role of multi-factor authentication, Turing tests, confidentiality and the like-- with those in mind we suspect that many WPIG discussions are not only low level discussions.

We offer to assist in this request. We encourage WPSIG to dialog with APAWG.

To repeat, we are not holding up the group's rechartering. We do look forward to seeing accessibility being, sometimes, within scope, and on the WPSIG agenda.

[1] https://www.w3.org/TR/htr/#goals

@ianbjacobs
Copy link
Author

Hi @lwolberg,

First, thank you for the review.

This group does not produce any specifications. Thus, we have no requirements documents that would inform the shape of a technical specification. Furthermore, our charter explicitly says we will not discuss products or implementations.

Our charter does not exclude discussion of accessibility topics (related to payments) and I am certain it would be very interesting to organize a joint discussion either by phone or during a TPAC meeting. I will start a discussion between WPSIG and APAWG chairs regarding a joint discussion about payment security issues related to accessibility.

Thank you again,
Ian

@ianbjacobs
Copy link
Author

I am closing this issue because both groups that indicated an expectation to review the charter did so and supported advancing it to AC review. Thank you,
Ian

@ianbjacobs ianbjacobs moved this from Chartering to Strategy Work Concluded in Strategy Team's Incubation Pipeline (Funnel) Jan 11, 2023
@ianbjacobs
Copy link
Author

Hi @lwolberg,

Your comments are already leading to interesting discussion. :)

The FIDO Alliance has published some resources related to accessibility, including Guidance for Making FIDO Deployments Accessible to Users with Disabilities. As a starting point I will be checking with the co-Chairs of the two groups regarding mutual awareness of resources.

@lwolberg
Copy link

Hi @ianbjacobs your responses are very encouraging!
We look forward to engaging in the coming year.

@lwolberg
Copy link

We were wondering if someone from this IG or the larger Web Payments community would volunteer to be an accessibility liaison.

In addition to the concerns I shared above, we also would like to ensure accessible receipts.

We very much appreciate the attention you are giving to this important issue, thanks again.

@ianbjacobs
Copy link
Author

Hi @lwolberg,

I volunteer to be the liaison.

Receipts are not currently on our agenda (either in the Working Group or this IG).

@plehegar
Copy link
Member

(@plehegar to check with @michael-n-cooper before this charter gets approved by the Director)

@plehegar
Copy link
Member

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

5 participants