PWG Plenary Minutes * Virtual F2F * 13 February 2019

Attendees

- Cihan Colakoglu (Kyocera, call-in)
- Gupta Gyaneshwar (Oki Data, call-in)
- Sean Kau (Google, call-in)
- Smith Kennedy (HP Inc, PWG Chair, call-in)
- Jeremy Leber (Lexmark, call-in)
- Matt Matsutani (Brother, call-in)
- Ira McDonald (High North, PWG Secretary, IPP WG Co-Chair, call-in)
- Alan Sukert (Xerox, PWG Vice-Chair, IDS WG Chair, call-in)
- Mike Sweet (Apple, IPP WG Secretary, call-in)
- Bill Wagner (TIC, former Cloud WG and WIMS WG Chair, call-in)
- Rick Yardumian (Canon, call-in)

Preface

This meeting was announced and chaired by Smith Kennedy. This was a PWG Virtual F2F meeting with WebEx and Audio bridges. These minutes were prepared by Ira McDonald with help from Mike Sweet and Smith Kennedy.

See slides at:
http://ftp.pwg.org/pub/pwg/general/Plenary/pwg-plenary-february-2019.pdf

Agenda

(1) Agenda, IP Policy, Minute Taker
* Summary

* Reviewed agenda and PWG IP Policy

-- Ira McDonald as minute taker

-- All times are US Mountain Standard Time

13 February 2019, Wednesday 
    9:00 AM – 10:15 AM  PWG Plenary
   10:15 AM – 10:30 AM  IPP WG : Status
   10:30 AM – 11:00 AM  IPP WG : IPP Everywhere™ v1.1 · IPP Everywhere™ Self-Cert Manual v1.1
   11:00 AM – 11:30 AM  Break / Lunch
   11:30 AM – 12:15 PM  IPP WG: PWG 3D Liaison Discussion
   12:15 PM – 1:00 PM   IPP WG: IPP 3D v1.1 · PWG Safe G-Code
    1:00 PM – 1:15 PM   Break
    1:15 PM – 2:00 PM   IPP WG: System Service
    2:00 PM – 3:00 PM   IPP WG: IPP Authentication Methods

14 February 2019, Thursday
    9:00 AM – 11:00 AM  IDS WG: Status and Discussion
   11:00 AM – 11:30 AM  Break / Lunch
   11:30 AM – 1:00 PM   IPP WG: JPS2 v2.0
    1:00 PM – 1:15 PM   Break
    1:15 PM – 1:45 PM   IPP WG: MFD Alerts v1.1
    1:45 PM – 2:30 PM   IPP WG: IPP Document Object v1.1
    2:30 PM – 3:00 PM IPP WG: Next Steps

(2) Future PWG Meeting Schedule
* Summary

* 2019 Meeting Schedule (tentative)
-- 16-18 April 2019: Joint PWG/OP F2F - Lexington, KY - hosted by Lexmark

-- 28-29 August 2019: Virtual F2F

-- 13-14 November 2019: Virtual F2F

* Contact 
-- Contact chair@pwg.org if you are interested in hosting a PWG F2F event

(3) PWG Membership
* 24 members (23 voting, 1 non-voting)
```
* Discussion
-- Google may join PWG
```

(4) PWG Officers
* 2017-2019 Term

- PWG Chair: Smith Kennedy (HP Inc)

- PWG Vice-Chair: Alan Sukert (Xerox)

- PWG Secretary: Ira McDonald (High North)

(5) IPP Everywhere™ Certified Printers
* Status

* IPP Everywhere™ Self Certification 1.0 Update 3
-- Current certification toolset available on PWG website

-- Released November 2018

* 355 Printers now certified!
-- https://www.pwg.org/dynamo/eveprinters.php

-- More on the way (smile)

* More to come
-- IPP Everywhere™ v1.1 – Q1 2019

-- IPP Everywhere™ Self Certification v1.1 – Q2 2019

(6) PWG Projects on Github
* Web Access Links

* Github PWG organization account
-- https://github.com/istopwg

* IPP Sample
-- https://github.com/istopwg/ippsample

* IPP Everywhere™ Self-Certification Tools
-- https://github.com/istopwg/ippeveselfcert

* IPP Registry
-- https://github.com/istopwg/ippregistry

* PWG Books:
-- https://github.com/istopwg/pwg-books

(7) PWG WG Status
See Work In Progress GANT chart in Plenary slides

*** IDS WG (Alan Sukert) - see Plenary slides

* Charter
-- IDS WG Charter was revised in July 2017

-- IDS WG is "active" again with a revised mission

-- Provide a path for vendors to review and contribute to the definition of 
   Common Criteria HCD Protection Profiles

* Current Status
-- IDS Charter updated to focus the IDS WG on outreach with other standards 
   bodies involved in HCD security issues

-- HCD Technical Committee (TC) Meetings

--- HCD TC Conference Call held on 10 January 2019 - will be having monthly 
    HCD TC conference calls starting in February 2019

--- Status of HCD TC, HCD PP Version 1.1 and effort to form an HCD International TC 
    (iTC) will be discussed at the IDS WG Session on Thursday, 14 February 2019

-- Also looking into establishing possible liaison with TCG and with ISO JTC1/SC28 
   to follow additional standards efforts related to the security of image devices

* Next steps
-- IDS WG call on Thursday 21 March 2019 at 3:00-4:30pm US Eastern

*** IPP WG (Ira McDonald) - see Plenary slides

* Charter
-- IPP WG Charter was revised in June 2017

--- minor update for current work items

* PWG Specifications in development
-- IPP 3D Printing Extensions v1.1 - Stable draft

-- IPP Document Object v1.1 - Interim draft

-- IPP Everywhere v1.1 - Stable draft

-- IPP Everywhere Printer Self-Certification Manual v1.1 - Prototype draft

-- IPP Job Extensions v1.1 - Interim draft

-- IPP Job and Printer Extensions - Set 2 v2.0 - Interim draft

-- IPP System Service v1.0 - Prototype draft

-- MFD Alerts v1.1 - Prototype draft

* IPP Best Practices in development
-- IPP Authentication Methods - Stable draft

-- IPP Encrypted Jobs and Documents - Interim draft

-- PWG Safe G-Code Subset for 3D Printing - Stable draft

* Up-to-date pending IANA registrations online
-- http://www.pwg.org/ipp/ipp-registrations.xml

-- Continue to maintain this in parallel for new specifications

-- Github repository: https://github.com/istopwg/ippregistry

* IPP Everywhere Printer Self-Certifications:
-- https://www.pwg.org/printers

-- 355 printers currently listed (tripled since August 2017)

-- Second 1.0 self-certification tools update released in October 2017

-- Third 1.0 self-certification tools update released in November 2018

* IPP Sample Code:
-- Github repository:

--- https://github.com/istopwg/ippsample

-- Fork of CUPS code includes ippfind, ippproxy, ippserver, ipptool, ipptransform, 
   and ipptransform3d

* Next steps
-- IPP WG call on Thursday 28 March 2019 at 3:00-4:30pm US Eastern

(8) Liaison Status
*** Trusted Computing Group (TCG) (Ira McDonald) - see Plenary slides

* Next TCG Members Meetings (face-to-face)
-- 25-28 February 2019 – Seoul, South Korea – Ira to call in

-- 10-13 June 2019 – Warsaw, Poland – Ira to call in 
   – conflicts w/ ESCAR USA 12-13 June 2019

* Trusted Mobility Solutions (TMS) - Ira is co-chair and co-editor
-- Scope: mobile phones, telecom networks, enterprise/financial

-- Formal liaisons: ATIS (5G security), ETSI (NFV and MEC), Global Platform (TEE and SE)

-- ATIS/TCG - joint work on 5G security and runtime integrity

-- GP/TCG - joint work on remote attestation, GP/TCG security mgmt, and runtime integrity

-- Informal liaisons: GSMA, 3GPP, ITU-T, SAE, IETF TLS, IETF SACM, US NIST

-- TCG TMS Use Cases v2 – published in September 2018

* Mobile Platform (MPWG) - Ira is co-editor
-- Scope: mobile phones, telecom networks

-- Formal liaisons - ATIS (5G Security), Global Platform (TEE and SE)

-- Mobile Runtime Integrity Preservation - public review in Q1 2019

-- TCG/GP collaboration – Integrating GP and TCG Security Technologies

* TCG Recent Specifications
-- http://www.trustedcomputinggroup.org/resources

-- TCG Trusted Platform Module 2.0 r1.50 – public review January 2019

-- TCG Storage Opal Test Cases v1.0 r1.14 – public review January 2019

-- TCG Architect’s Guide Portable Device Security Using TNC – published November 2018

-- TCG EK Credential Profile for TPM v2.0 – publication approved November 2018

-- TCG PC Client Platform Firmware Profile r1.04 – public review November 2018

-- TCG Storage Security Subsystem Class: Ruby v1.0 – public review November 2018

-- TCG TMS Use Cases v2 – published September 2018

-- TCG Trusted Network Communications for Mobile Platforms – published September 2018

-- TCG Protection Profile Automotive-Thin TPM/2.0 – public review September 2018

*** Internet Engineering Task Force (IETF) (Ira McDonald) - see Plenary slides

* Next IETF Members Meetings
-- IETF 104 – 23-20 March 2019 – Prague, Czech Republic – Ira to call in 
   – conflicts w/ Detroit Auto Cyber 28-29 March 2019

-- IETF 105 – 20-26 July 2019 – Montreal, Canada – Ira to call in

* Transport Layer Security (TLS)
-- TLS/1.3 - RFC 8446 - August 2018
--- https://www.rfc-editor.org/info/rfc8446

-- DTLS/1.3 – draft-30 – November - revision needed from TLS WG Last Call
--- https://datatracker.ietf.org/doc/draft-ietf-tls-dtls13/

* Security Automation and Continuous Monitoring (SACM)
-- SACM Terminology – draft-16 – December 2018
--- https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/

-- Concise Software Identifiers – draft-08 – November 2018
--- https://datatracker.ietf.org/doc/draft-ietf-sacm-coswid/

-- SACM Endpoint Posture Collection Profile - draft-03 - September 2018
--- https://datatracker.ietf.org/doc/draft-ietf-sacm-ecp/

* Concise Binary Object Representation (CBOR)
-- Concise Binary Object Representation (CBOR) – draft-05 – January 2019
--- https://datatracker.ietf.org/doc/draft-ietf-cbor-7049bis/

-- Concise Data Definition Danguage (CDDL) – draft-06 – November 2018 – completed IETF Last Call
--- https://datatracker.ietf.org/doc/draft-ietf-cbor-cddl

* IRTF Crypto Forum Research Group (CFRG) - future algorithms
-- Pairing Friendly Curves – draft-00 – January 2019 – addresses the BN_256 weakness (only 100-bit security)
--- https://datatracker.ietf.org/doc/draft-yonezawa-pairing-friendly-curves/

-- Hash-Based Signatures – draft-15 – January 2019 – complementary to XMSS (RFC 8391)
--- https://datatracker.ietf.org/doc/draft-mcgrew-hash-sigs/

-- Re-keying Mechanisms for Symmetric Keys – draft-14 – December 2018
--- https://datatracker.ietf.org/doc/draft-irtf-cfrg-re-keying/

-- Memory-hard Argon2 password hash and proof-of-work – draft-04 – November 2018
--- https://datatracker.ietf.org/doc/draft-irtf-cfrg-argon2/

-- Randomness Improvements for Security Protocols - draft-03 - October 2018 - fundamental
--- https://datatracker.ietf.org/doc/draft-irtf-cfrg-randomness-improvements/

-- XMSS: Extended Hash-Based Signatures - RFC 8391 - May 2018 
--- https://www.rfc-editor.org/info/rfc8391

*** Linux Foundation OpenPrinting (Ira) - see Plenary slides

* Linux Foundation OP Google Summer of Code 2018
-- Lots of good work and contributions to PWG's GitHub projects

-- Close reading of a number of PWG specs revealed additional
   errata - now in progress for several PWG specs

-- Thanks to Linux OpenPrinting coordinators, mentors, and all the
   students for your hard work and contributions!

* Linux Foundation OP Google Summer of Code 2019 – ideas
-- Generic Framework: Printer Application from Legacy Driver

-- Printer Applications from Foomatic, Gutenprint, HPLIP, etc.

-- Printer Application from SANE scanner (via IPP Scan Service)

-- Linux GUI app for MFD system admin (via IPP System Service)

-- ipptool scripts for IPP System Service and IPP Errata updates

* Linux Foundation OP Website Renovation – ongoing
-- Aveek and Till found GSoC 2017/2018 students to do the work

-- New OP website is almost complete!

-- Development in Jekyll/GitHub (used by Mike Sweet for years)

-- About Us page will describe collaboration w/ IEEE-ISTO PWG

-- Driverless Printing page will describe IPP Everywhere™ and display
   the PWG IPP Everywhere™ logo

*** Mopria - see Plenary slides

* Mopria liaison to the PWG : Jeremy Reitz (Xerox)

* Mopria Alliance 2018 Overview Presentation
-- https://ftp.pwg.org/pub/pwg/liaison/mopria/Mopria-Alliance-October-2018.pdf

* No updates since November 2018

*** Additive Manufacturing Liaisons (Paul Tykodi) - see Plenary slides

* America Makes & ANSI Additive Manufacturing Standardization Collaborative (AMSC)
-- https://www.ansi.org/standards_activities/standards_boards_panels/amsc/Default?menuid=3

-- The IEEE-ISTO Printer Working Group is participating in the AMSC initiative

* ISO/IEC JTC 1 WG 12 3D Printing and Scanning Committee
-- https://isotc.iso.org/livelink/livelink?func=ll&objId=19905763&objAction=browse&viewType=1

-- The IEEE-ISTO Printer Working Group is participating in the ISO initiative

* Society of Manufacturing Engineers (ITEAM)
-- www.sme.org/iteam/

* 3D PDF Consortium
-- www.3dpdfconsortium.org

* 3MF Consortium
-- 3mf.io