PWG Steering Committee Minutes * 11 August 2016

Attendees

Smith Kennedy (HP Inc, PWG Chair)
Daniel Manchala (Xerox, SM WG Chair)
Ira McDonald (High North, PWG Secretary, IPP WG Co-Chair)
Alan Sukert (Xerox, PWG Vice Chair, IDS WG Chair)
Paul Tykodi (TCS, SM WG Co-Chair, IPP WG Co-Chair)
Bill Wagner (TIC, SM WG Secretary)

Preface

This meeting was announced and chaired by Smith Kennedy.

These minutes were prepared by Ira McDonald with much help from Smith Kennedy.

Agenda

(0) Agenda bashing, IP Policy, minute taker

- Review agenda and state PWG IP Policy
  - Ira McDonald as minute taker

- Proposed Agenda:
  (1) Administrivia
  (2) Discuss open action items
  (3) Vectra Networks blog posting on IPP
  (4) PWG Process 4.0
  (5) YSoft considering joining the PWG
  (6) PWG F2F prep and Plenary slides review
  (7) AOB

(1) Review previous minutes
http://ftp.pwg.org/pub/pwg/general/sc/pwg-sc-concall-minutes-20160728.htm
```
- Review minutes of SC on 28 July 2016
  - Approved as posted
```
(2) Discuss open action items
http://ftp.pwg.org/pub/pwg/general/sc/pwg-sc-concall-minutes-20160728.htm
```
- Review actions of SC on 28 July 2016
  - see Previous Action Items below
```

(3) Vectra Networks blog posting on IPP
"Own a printer, own a network with point and print drive-by"

- Discussion
  - continuing PWG concerns about misrepresentation of IPP

- Issue is with Windows "Web Point and Print" which is supported by 
  Microsoft's IPP printing module components
  - Exploit generally takes advantage of delivery of malicious code 
    inserted into driver packages - driver signatures etc. are not 
    checked when received via this vector
  - Exploit seems to occur before IPP is even used, if it would be 
    used at all - drivers (whether corrupt or sound) are deployed via 
    conventional HTTP

- PWG engagement
  - Paul noticed the blog postings and sent out to SC
  - Goal:  get Vectra Networks to clarify in their blog posting that 
    IPP itself is not used and is not responsible for any portion of 
    the security problems in this issue
  - Smith contacted Vectra Networks on 2016-07-29, requested more details, 
    email thread went a bit stale - no follow-up details provided
  - Smith sent query 2016-08-11, they were prepping for Black Hat, 
    more details from researchers pending
  - Possible PWG call w/ Vector researchers next week (to be scheduled)
    per Vectra Networks reply on 2016-08-12

(4) PWG Process 4.0
http://ftp.pwg.org/pub/pwg/general/wd/wd-process40-20160721.docx

- Discussion
  - Second draft still pending
  - Ira and Smith to have a 1:1 call to make some progress on a next 
    draft, etc.

(5) YSoft considering joining the PWG

- Discussion
  - Involved with both 2D and 3D managed print service / servers and 
    scan servers
  - Strongly in favor of standards-based print solutions
  - Smith invited Ysoft folks to attend PWG F2F at Sharp
  - https://www.ysoft.com/en

(6) PWG F2F prep and Plenary slides review
http://www.pwg.org/chair/meeting-info/august-2016-camas.html
http://www.pwg.org/chair/meeting-info/meetings.html

- Discussion
  - Add Gartner to the Drupa topic
    - Paul to invite Gartner representative to the PWG IPP 3D session
  - SM and IPP WG charter updates needed to have them include the new work 
    listed on the Plenary slides Gantt chart (IPP 3D SM, IPP Everywhere 
    Self-Certification 1.0.1 and 1.1)

(7) Next SC meetings
http://ftp.pwg.org/pub/pwg/general/sc

- Tiger team next week at noon EST 8/18 for Process 4.0?

- Plenary - Tuesday 23 August 9am Pacific / 12pm Eastern

- SC - Thursday 8 September 9am Pacific / 12pm Eastern (tentative)

Previous Action Items

ACTION: Ira to document OID arc usage in PWG
- OPEN - action applies particularly to LDAP OID usage
- "arc" is any single value (often least-significant) in an OID
- Existing plain text PWG policy and registry for each PWG MIB base OID
-- http://ftp.pwg.org/pub/pwg/general/process/pwg-mib-numbers-20091220.txt
- IBM gave the PWG a permanent arc for the LDAP schema OIDs for the version 2 schema
-- LDAP OIDs to be documented in a additional policy and registry in ".../process/"
ACTION: Ira to update "pwg-namespace-policy-20060112.txt" - add "white" prefix and update project and document lifecycles
- OPEN - in progress - need separate whitepaper lifecycle and WG draft lifecycle
ACTION: Smith/Ira to write job descriptions for PWG Chair, PWG Vice-Chair, and PWG Secretary
- OPEN - in progress - should result into a new policy document (eventually plain text but start with MS Word working drafts) - Smith sent initial draft to Ira - Ira proofed and posted for SC review - Feedback from Bill requesting more details on the specific responsibilities of each officer - Next draft out soon?
ACTION: Smith to reach out to the 3MF officers to work on co-branding and PWG collaboration
- OPEN - in progress - Smith reached out to 3MF Consortium officers about logo usage, not complete yet - Smith to check in with Adrian about 3MF co-branding - PWG members prototyping 3MF file with PWG PJT with IPP 3D attributes embedded and we will review this prototype at the August F2F
ACTION: Ira to do a liaison slide for new CC HSM TC
- CLOSED - the TC has been formed but has never met
ACTION: Ira and Alan work w/ Anne Price to develop a joint TCG/PWG demo of HCD-TNC profile in a Printer with a Router or OS evaluating the Printer Health
- OPEN
ACTION: Smith/Mike/Ira/anybody to draft whitepaper on late binding for best fidelity in Cloud servers, intent vs. process for output fidelity, and the fundamental design ethos of the PWG's work
- OPEN - perhaps have as a topic for the August F2F to enumerate core set of concepts with which to construct an outline for the document - Smith to add discussion of this topic as a slide / topic for the August F2F plenary
ACTION: SC members to review Mike's new 3D, IPP Eve, and SM landing pages
- CLOSED
ACTION: Smith to send out a query to the SC to request recommendations for what to add to a Process 4.0 update, and use that to create a first draft of Process 4.0 in time for the August F2F
- CLOSED