[webkit-dev] Request for Position: Secure Payment Confirmation

2021-08-24 Thread Stephen Mcgruer via webkit-dev
Hi WebKit,

I am seeking WebKit's position on the Secure Payment Confirmation Web API
currently under development in the Web Payments Working Group.

Secure Payment Confirmation (SPC) is a proposed Web API to support
streamlined authentication during a payment transaction. It is designed to
scale authentication across merchants, to be used within a wide range of
authentication protocols, and to produce cryptographic evidence that the
user has confirmed transaction details.

SPC adds payment-specific capabilities atop WebAuthn and is designed with
stronger privacy protections than current risk analysis approaches that
rely on data collection.

Specification Title: Secure Payment Confirmation
Specification or proposal URL:
https://w3c.github.io/secure-payment-confirmation/
Explainer URL:
https://github.com/w3c/secure-payment-confirmation/blob/main/explainer.md
TAG review:
https://github.com/w3ctag/design-reviews/issues/544#issuecomment-904606925
Mozilla Standards Position:
https://github.com/mozilla/standards-positions/issues/570

Thanks!

Stephen
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


[webkit-dev] Safari Tech Preview 97 available on wpt.fyi

2019-12-30 Thread Stephen Mcgruer
I am excited to announce that Safari Tech Preview 97 is now available on
wpt.fyi!

Example run:
https://wpt.fyi/results/?label=master=experimental=chrome=firefox=safari

Diff against Safari Tech Preview 96 (not at exactly the same WPT sha, but
close):
https://wpt.fyi/results/?diff=ADC_id=383280001_id=375460004

Particularly exciting to me (see my tweet[0]) is that Safari Tech Preview
97 shows a *25%* reduction in browser-specific failures versus Safari Tech
Preview 96. The approximate list of fixes is
https://wpt.fyi/results/?q=seq%28status%3Apass%20status%3Apass%20status%3A%21pass%20status%3Apass%29_id=394240004_id=375480002_id=383280001_id=375460004.
I
want to share my wholehearted congratulations with the entire WebKit team
for this awesome step forward in web interoperability!

Looking forward to Safari Tech Preview 98!

[0]: https://twitter.com/stephenmcgruer/status/1211723768747479042
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


Re: [webkit-dev] Safari Tech Preview 96 available on wpt.fyi!

2019-12-02 Thread Stephen Mcgruer
>
> There’s a number of mysterious timeouts with 96. Not sure if flakiness or
> real?
> Many large new chunks of not-run tests are caused by a harness error or
> timeout. E.g. html/ and webauthn


We have unfortunately struggled historically with getting reliable +
consistent results for Safari, with spurious infrastructure + other
problems. That said, Igalia has been working on improving reliability and
have made good progress, and we have also invested in projects like the
WebkitGTK runs to help with this problem (e.g. if a test fails in both
Safari and WebKitGTK, there's a better chance it's a real failure[0])

We have had many Safari TP 96 runs since my announcement (
https://wpt.fyi/runs?label=master=100=safari); you can
click on a single run (the icon) to view the run itself, or click on two
runs to get a diff view - which can be useful for spotting flakes (as most
SHAs are only changing a few tests, so differences between consecutive runs
are usually flakes). There is also an explicit flake analyzer on our
insights page - https://wpt.fyi/insights (it's a little clunky but can
still be useful).

I believe these tests are flaky. I have made a PR to improve it a while
> ago. I should probably get those improvement landed sometime.


Improvements would be great! Looking at that PR, it is quite old, so will
need to be rebased and force pushed. Let me know if you need any help on
that :).

STP 96 has enabled user agent UI for WebAuthn, which could cause crashes.
> This could be the reason why webauthn is 0 all the time.


It does look like there are still some harness failures in further STP 96
runs (e.g. https://wpt.fyi/results/webauthn?run_id=361070008); I see a
mention in the failing tests of a "UnexpectedAlertOpenException: unexpected
alert open (500):" - is that what you mean? Is there some flag we could be
setting on STP, or something Safaridriver could be doing to avoid these?

[0]:
https://wpt.fyi/results/?label=master=safari%5Bexperimental%5D=webkitgtk=chrome%5Bexperimental%5D=firefox%5Bexperimental%5D=safari%3Afail%20webkitgtk%3Afail%20chrome%3Apass%20firefox%3Apass
is
an example search for tests that fail in both Safari + WebKitGTK, but pass
in both Chrome and Firefox.

On Mon, 2 Dec 2019 at 21:04, Jiewen Tan  wrote:

> Hi Maciej,
>
> On Dec 2, 2019, at 4:10 PM, Maciej Stachowiak  wrote:
>
>
> There’s a number of mysterious timeouts with 96. Not sure if flakiness or
> real?
>
> The new WebCrypto failures are surprising, but likely real and should be
> investigated:
> https://wpt.fyi/results/WebCryptoAPI/wrapKey_unwrapKey?diff=ADC=is%3Adifferent_id=347530011_id=381930013
> <https://wpt.fyi/results/WebCryptoAPI/wrapKey_unwrapKey?diff=ADC=is:different_id=347530011_id=381930013>
>
>
> I believe these tests are flaky. I have made a PR to improve it a while
> ago. I should probably get those improvement landed sometime.
> https://github.com/web-platform-tests/wpt/pull/6102
>
>
> Many large new chunks of not-run tests are caused by a harness error or
> timeout. E.g. html/ and webauthn/
>
>
> STP 96 has enabled user agent UI for WebAuthn, which could cause crashes.
> This could be the reason why webauthn is 0 all the time.
>
> Best,
> Jiewen
>
>
>
> On Nov 27, 2019, at 7:07 AM, Stephen Mcgruer 
> wrote:
>
> Excited to announce that Safari Tech Preview 96 is now available on
> wpt.fyi!
>
> Example run:
> https://wpt.fyi/results/?label=master=experimental=chrome=firefox=safari
>
> Diff against Safari Tech Preview 95 (not at exactly the same WPT sha, but
> very close):
> https://wpt.fyi/results/?diff=ADC=is%3Adifferent_id=347530011_id=381930013
>
> If you are surprised by the results in the diff view, I would love to hear
> about it. One thing that surprised me is that the release blog post[0]
> mentioned Web Animations being enabled by default, but we see no
> differences in the test diff for web-animations/. It's possible we enable
> some flag that turned on Web Animations already, but I can't see it
> obviously in our safari setup[1].
>
> [0]:
> https://webkit.org/blog/9658/release-notes-for-safari-technology-preview-96/
> [1]:
> https://github.com/web-platform-tests/wpt/blob/master/tools/ci/azure/install_safari.yml
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev
>
>
> ___
> webkit-dev mailing list
> webkit-dev@lists.webkit.org
> https://lists.webkit.org/mailman/listinfo/webkit-dev
>
>
>
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


Re: [webkit-dev] Safari Tech Preview 96 available on wpt.fyi!

2019-11-28 Thread Stephen Mcgruer
>
> Safari Technology Preview had been shipping with Web Animations on by
> default prior to that change. The value
> DEFAULT_EXPERIMENTAL_FEATURES_ENABLED is true for STP builds. So it’s
> correct that you don’t see any change.


Thanks for the explanation! :)

On Thu, 28 Nov 2019 at 07:34, Antoine Quint  wrote:

> Hi Stephen,
>
> On 27 Nov 2019, at 16:07, Stephen Mcgruer  wrote:
>
> One thing that surprised me is that the release blog post[0] mentioned Web
> Animations being enabled by default, but we see no differences in the test
> diff for web-animations/. It's possible we enable some flag that turned on
> Web Animations already, but I can't see it obviously in our safari setup[1].
>
>
> Safari Technology Preview had been shipping with Web Animations on by
> default prior to that change. The value
> DEFAULT_EXPERIMENTAL_FEATURES_ENABLED is true for STP builds. So it’s
> correct that you don’t see any change.
>
> Antoine
>
>
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


[webkit-dev] Safari Tech Preview 96 available on wpt.fyi!

2019-11-27 Thread Stephen Mcgruer
Excited to announce that Safari Tech Preview 96 is now available on wpt.fyi!

Example run:
https://wpt.fyi/results/?label=master=experimental=chrome=firefox=safari

Diff against Safari Tech Preview 95 (not at exactly the same WPT sha, but
very close):
https://wpt.fyi/results/?diff=ADC=is%3Adifferent_id=347530011_id=381930013

If you are surprised by the results in the diff view, I would love to hear
about it. One thing that surprised me is that the release blog post[0]
mentioned Web Animations being enabled by default, but we see no
differences in the test diff for web-animations/. It's possible we enable
some flag that turned on Web Animations already, but I can't see it
obviously in our safari setup[1].

[0]:
https://webkit.org/blog/9658/release-notes-for-safari-technology-preview-96/
[1]:
https://github.com/web-platform-tests/wpt/blob/master/tools/ci/azure/install_safari.yml
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev


[webkit-dev] WPT at the WebKit Contributors Meeting

2019-11-10 Thread Stephen Mcgruer
Hi all,

Philip (foo...@chromium.org) and I wanted to thank you all for welcoming us
at the WebKit Contributors Meeting last week to talk about Improving
Interop with WPT[0] (web-platform-tests). We felt there was great dialog
about WebKit and WPT, and we hope to keep that going looking forward.

We have opened a few issues tracking items that were discussed at the
meeting, including adding WebKitGTK to the UI[1] (fixed!), improving WebKit
--> WPT export[2], and adding download links on the wpt.fyi dashboard[3].
We also intend to publish our methodology for the 'browser-specific
failures' graph by the end of the year (including making it easy for anyone
to run the same analysis).

Please feel free to voice questions, concerns, or ideas via:

   1. Issues filed on our github repository for web-platform-tests[4] or
   the wpt.fyi dashboard[5], or
   2. Email to smcgr...@chromium.org and foo...@chromium.org.

We also accept pull requests, of course!

Thanks,
Stephen & Philip

[0]: https://trac.webkit.org/wiki/ImprovingInteropwithWPT
[1]: https://github.com/web-platform-tests/wpt.fyi/issues/1576
[2]: https://github.com/web-platform-tests/wpt-pr-bot/issues/100
[3]: https://github.com/web-platform-tests/wpt.fyi/issues/1480
[4]: https://github.com/web-platform-tests/wpt/issues
[5]: https://github.com/web-platform-tests/wpt.fyi/issues
___
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev