{"id":3493,"date":"2023-09-25T18:19:45","date_gmt":"2023-09-25T16:19:45","guid":{"rendered":"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/"},"modified":"2023-09-25T18:19:45","modified_gmt":"2023-09-25T16:19:45","slug":"w3c-tpac-2023-trip-report","status":"publish","type":"post","link":"https:\/\/tomayac.com\/wordpress\/2023\/09\/25\/w3c-tpac-2023-trip-report\/","title":{"rendered":"W3C TPAC 2023 Trip Report"},"content":{"rendered":"\n\t\t\t<h2 id=\"background\" tabindex=\"-1\">Background <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#background\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<p>The 2023 edition of the World Wide Web Consortium (W3C) Technical Plenary and\nAdvisory Committee (TPAC) meeting took place from September 11 to 15 in the\n<a href=\"https:\/\/www.melia.com\/en\/hotels\/spain\/seville\/melia-sevilla\">Meli\u00e3 hotel in Seville<\/a>,\nSpain. The hotel is located right next to the\n<a href=\"https:\/\/en.wikipedia.org\/wiki\/Plaza_de_Espa%C3%B1a,_Seville\">Plaza de Espa\u00f1a<\/a>,\na major Spanish tourist destination. The setup of the meeting was hybrid, and on\nsite, strict Covid precautions were enforced, even though the pandemic was\ndeclared to be &quot;over&quot;. Despite these methods, several people caught it. This is\nmy personal report as a representative of the Chrome DevRel team at Google.<\/p>\n<p><img src=\"https:\/\/blog.tomayac.com\/images\/w3ctpac2023tri--q5fbcovgd9r.jpg\" alt=\"Panorama of Plaza de Espa\u00f1a.\" \/><\/p>\n<p><img src=\"https:\/\/blog.tomayac.com\/images\/w3ctpac2023tri--u0djnvaere.jpg\" alt=\"View of the hotel pool with the Glorieta De La Ronda De Capitania in the background.\" \/><\/p>\n<h2 id=\"monday-tuesday\" tabindex=\"-1\">Monday, Tuesday <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#monday-tuesday\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<h3 id=\"web-applications-working-group\" tabindex=\"-1\">Web Applications Working Group <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#web-applications-working-group\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>I attended the\n<a href=\"https:\/\/www.w3.org\/2008\/webapps\/\">Web Applications Working Group<\/a> meetings on\nMonday and Tuesday. After a quick rundown of all the APIs in scope for the\nworking group, the first topic was the\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/ScreenOrientation\">Screen Orientation API<\/a>,\nwhich was mostly driven by questions and improvement proposals the WebKit folks\nhad after implementing it.<\/p>\n<p>Next, the group discussed the Badging API, which is only available after\ninstallation, and browsers differ on whether they make the API detectable when\nthe app is running in a tab.<\/p>\n<p>An interesting corner case was debated in the context of the joint meeting with\nthe <a href=\"https:\/\/www.w3.org\/groups\/wg\/das\/\">Devices and Sensors Working Group<\/a>.\nApple can't join the group due to its unwillingness to implement some of the\nAPIs and the sheer volume of proposals the team would have to review. The\nworkaround is\n<a href=\"https:\/\/w3c.github.io\/webappswg\/charter\/draft-charter-2023.html#working-mode\">shared deliverables<\/a>,\nwhere the APIs that there <em>is<\/em> agreement on get cross-delivered by a working\ngroup Apple is part of.<\/p>\n<p>Following this, we talked about whether the\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Screen_Wake_Lock_API\">Screen Wake Lock API<\/a>\nshould use\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Transient_activation\">transient<\/a>\nor\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Glossary\/Sticky_activation\">sticky activation<\/a>.<\/p>\n<p>The group made no progress on Fran\u00e7ois Beaufort's suggestion for a\n<a href=\"https:\/\/github.com\/w3c\/screen-wake-lock\/blob\/gh-pages\/brightness-mode-explainer.md\">Screen Brightness API<\/a>.<\/p>\n<p>On the topic of\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Device_orientation_events\/Detecting_device_orientation\">DeviceOrientation API<\/a>\nvs. <a href=\"https:\/\/www.w3.org\/TR\/generic-sensor\/\">Generic Sensor API<\/a>, the\nsoft-conclusion was that the new API provides not enough advantage over the\nexisting API. There's still disagreement about whether using the API should\nrequire a permission, which is mostly used for fraud detection to determine if a\nreal user is holding a device.<\/p>\n<p>For the\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Geolocation_API\">Geolocation API<\/a>,\nmost discussion circulated around limiting its precision by encouraging more\ncoarse data. On the opposite side, there's also still the open question of\n<code>floorLevel<\/code> data, which Safari exposes, but which isn't standardized. The group\nbriefly discussed a <code>toJSON()<\/code> method for geolocation results, but it probably\nwould be a breaking change due to <code>instanceof<\/code> checks. The\n<a href=\"https:\/\/github.com\/w3c\/geolocation-api\/issues\/74\">background geolocation<\/a>\ndiscussion was taken over repeatedly by trolls, which made proper discussion\npartly impossible. It's a solve-worthy problem, albeit it's a heated space.\n<a href=\"https:\/\/www.w3.org\/TR\/geolocation-sensor\/\">Geolocation Sensor<\/a> had promises but\nwe're not sure it's worth bringing this over, since the callback can easily be\nwrapped.<\/p>\n<p>There was a joint meeting with the\n<a href=\"https:\/\/www.w3.org\/International\/core\/\">Internationalization Working Group<\/a> to\ndiscuss long-standing\n<a href=\"https:\/\/github.com\/w3c\/manifest\/issues\/1045\">open questions regarding translations of the Web App Manifest<\/a>\nwere investigated, which resulted in a\n<a href=\"https:\/\/github.com\/w3c\/manifest\/issues\/1045#issuecomment-1713866460\">potential solution<\/a>.\nI foresee challenges when looking at the <code>&quot;shortcuts&quot;<\/code> member.<\/p>\n<h4 id=\"notes-and-resources\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1RIaeXT_-j8n4iGPI3odZyJTqtHCKqe3oWZTO-j21z9U\/edit#heading=h.n0pc0966xlbs\">WebApps WG TPAC 2023 Meeting (Day 1)<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1QDqllh8inOcIkTrblERm4HRKYh8Ce9Lu5S7WhOygs_0\/edit#heading=h.n0pc0966xlbs\">WebApps WG TPAC 2023 Meeting (Day 2)<\/a><\/li>\n<\/ul>\n<h3 id=\"web-platform-incubator-community-group\" tabindex=\"-1\">Web Platform Incubator Community Group <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#web-platform-incubator-community-group\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>On Monday afternoon, I switched over to the Web Platform Incubator Community\nGroup (<a href=\"https:\/\/www.w3.org\/community\/wicg\/\">WICG<\/a>) meeting. The topics I was\ninterested in were Low Level Device APIs and First Party Sets (now Related\nWebsite Sets).<\/p>\n<p>In the first part, Vincent Scheib presented on low level device APIs. Firefox\nhas rolled out\n<a href=\"https:\/\/www.midi.org\/forum\/1332-web-midi-api-for-firefox\">Web MIDI access based on an ad-hoc extension<\/a>,\nwhich didn't seem it would convince Apple people. Apple also had doubts whether\na permission prompt would be enough for people to understand that devices can be\nabused to circumvent the same-origin model. Reilly Grant outlined that Chrome\nstopped tying WebUSB to websites in an attempt to keep devices usable, even if\nthe original website disappears.<\/p>\n<p>For First Party Sets, there are currently only a few entries in the\n<a href=\"https:\/\/github.com\/GoogleChrome\/first-party-sets\/blob\/main\/first_party_sets.JSON\">First Party Sets list<\/a>,\nfollowing the\n<a href=\"https:\/\/github.com\/GoogleChrome\/first-party-sets\/blob\/main\/FPS-Submission_Guidelines.md\">Submission Guidelines<\/a>.\nIt's rolling out to Chrome slowly. Other browser vendors do not implement First\nParty Sets at the moment.<\/p>\n<p>On Tuesday, the big topic was installable web apps where Dan Murphy presented\nour existing solutions around\n<a href=\"https:\/\/developer.chrome.com\/docs\/web-platform\/launch-handler\/\">Launch Handling<\/a>.\nMarcos from Apple and Olli from Mozilla questioned the queue model vs. an event\nmodel and suggested to replace <code>LaunchParams<\/code> with <code>DataTransferItem<\/code>. Apple\nnoted that a launch handling feature is something that they would probably need.<\/p>\n<blockquote>\n<p>Apple's questioning of Chrome's established solution caused me to raise a meta\nquestion: Chromium already asked for input years ago and got no meaningful\nfeedback and then shipped a solution that was proven to be successful. Now\nother vendors are interested, but want to change the fundamental design (and\nperhaps together we can all agree on a better design). What is the process\nhere? Are we as Chrome supposed to unship ours?<\/p>\n<\/blockquote>\n<p>Sangwhan Moon provided the Technical Architecture Group\n(<a href=\"https:\/\/tag.w3.org\/\">TAG<\/a>) perspective that Chrome makes sure other vendors\nprovide input before Chrome ships. Chrome can't wait until vendors have an\nactive interest. The group agreed to discuss next steps.<\/p>\n<p>Diego from Microsoft then presented the\n<a href=\"https:\/\/github.com\/MicrosoftEdge\/MSEdgeExplainers\/blob\/main\/WebInstall\/explainer.md\">Install API proposal<\/a>.\nThere was general interest in a solution, but a lot of skepticism when it comes\nto cross-origin installations, which would be an important use case for app\nstores or search engines.<\/p>\n<p>The group further discussed the standardization of\n[iOS' proprietary <code>navigator.standalone](https:\/\/github.com\/w3c\/manifest\/issues\/1092)<\/code>.<\/p>\n<p>After that, we looked at the\n<a href=\"https:\/\/www.w3.org\/2022\/09\/13-webapps-minutes.html#t03\">update algorithm<\/a>\ndiscussed at the last TPAC and confirmed an update token would be the way to go.<\/p>\n<p>The group briefly touched upon isolation of installed apps from the running\nbrowser context and the challenges it introduces with OAuth etc.<\/p>\n<p>Next was\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Mozilla\/Add-ons\/WebExtensions\/manifest.json\/protocol_handlers\">protocol handling<\/a>\nwhich Apple mostly opposed,\n<a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/API\/Window_Controls_Overlay_API\">window controls overlay<\/a>\nand <a href=\"https:\/\/web.dev\/tabbed-application-mode\/\">tabbed application mode<\/a> which\nApple was neutral-ish to, and my <a href=\"https:\/\/crbug.com\/1295253\">app menu proposal<\/a>\nwhich Apple committed to coming up with a proposal for. Mozilla notably was in\nthe room, but had no opinion on almost all topics close to PWA.<\/p>\n<p>Apple then dropped a\n<a href=\"https:\/\/github.com\/WebKit\/explainers\/blob\/main\/DeclarativeWebPush\/README.md\">proposal for declarative push notifications<\/a>.\nI filed a\n<a href=\"https:\/\/github.com\/WebKit\/explainers\/blob\/main\/DeclarativeWebPush\/README.md\">number of questions<\/a>\nto the proposal.<\/p>\n<h4 id=\"notes-and-resources-1\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-1\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1zZp6fY0JV7nt4IHZczCSQw2SqYsGednpU2kAO95rJbU\/edit#heading=h.b1lo9cy1ham\">Web Apps and Handling Data for TPAC (public)<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1PVkuF0g0pUj5NTQzUcpglSsOfwoOa_AZM-S7EJ5ZAbU\/edit\">WICG TPAC 2023 Low Level Device APIs<\/a>\n(<a href=\"https:\/\/docs.google.com\/presentation\/d\/1Nf64QLI-lkyqJ7UoDUPefrLJU7zcTUJKvTYV8L7ZAaY\/edit?resourcekey=0-Bf69ilULrcA4qBZb7ZHdkA#slide=id.p\">2022 TPAC Device APIs<\/a>)<\/li>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1edq0k9yGtTgcR4NViu0sibUkCcRHHTCBQXGCK759jLY\/edit#heading=h.703ew5rbvdo3\">TPAC 2023 - Web Platform Incubator CG (WICG) - Isolated Web Apps - Notes<\/a><\/li>\n<li><a href=\"https:\/\/github.com\/WICG\/first-party-sets\/blob\/main\/meetings\/09-11-2023-TPAC-minutes.md\">First Party Sets<\/a>\n(<a href=\"https:\/\/docs.google.com\/presentation\/d\/1K6surspD72-sdkVdRy6KxOA3uipj6XXB9lF_ynOaeX4\/edit?usp=sharing\">[Public] TPAC 2023: Related Website Sets (fka First-Party Sets)<\/a>)<\/li>\n<li><a href=\"https:\/\/onedrive.live.com\/edit.aspx?resid=8D8B723D008546BD!949334&amp;ithint=file%2Cdocx&amp;wdo=2&amp;authkey=!APpYdHqZA56dkBU\">Web Install API TPAC 23 discussion<\/a><\/li>\n<\/ul>\n<h2 id=\"wednesday\" tabindex=\"-1\">Wednesday <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#wednesday\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<p>Wednesday was the breakout session day. As always, there were some sessions that\nI wish I could have attended, but due to scheduling conflicts I couldn't. Below\nis the list of the sessions I attended.<\/p>\n<h3 id=\"accelerating-the-web-performance-by-compiling-javascript-code-to-wasm\" tabindex=\"-1\">Accelerating the Web performance by compiling Javascript code to WASM <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#accelerating-the-web-performance-by-compiling-javascript-code-to-wasm\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>This session introduced JWST, a JavaScript to WebAssembly static translator\n(compiler) co-developed by Huawei and a professor from a university in Beijing,\nafter claiming the (somewhat [citation needed]) problem of slowness of\nJavaScript being a problem for web apps and the lack of DOM access of Wasm as a\nmajor challenge. The presented compiler in their example converted a ~1.6MB\nJavaScript app (which is already big) into a &gt;20MB Wasm app that under <em>certain<\/em>\nconditions slightly outperformed the JavaScript solution in their benchmark. I\nasked for more details about the compiler, but there wasn't any and the Huawei\nrepresentatives said they weren't entirely sure about open-sourcing it. As it\nstands, my current evaluation of the solution is that it's technology\nfeasibility demonstration at best.<\/p>\n<h4 id=\"notes-and-resources-2\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-2\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/13-js2wasm-minutes.html\">Minutes<\/a><\/li>\n<li><a href=\"https:\/\/lists.w3.org\/Archives\/Public\/www-archive\/2023Sep\/att-0021\/TPCA_2023_-_Web_for_Apps_v1.pdf\">Slides web for apps<\/a><\/li>\n<li><a href=\"https:\/\/lists.w3.org\/Archives\/Public\/www-archive\/2023Sep\/att-0021\/W3C-TPAC-JWST-Beihang-ShiXiaohua-final.pdf\">Slides for JWST<\/a><\/li>\n<\/ul>\n<h3 id=\"page-embedded-permission-control-permission-element\" tabindex=\"-1\">Page Embedded Permission Control (Permission Element) <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#page-embedded-permission-control-permission-element\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>In this session, the Chrome team introduced our current thinking of a\n<code>permission<\/code> element. The reaction from both Apple and Mozilla was that they\nboth &quot;don't immediately hate it&quot;. Many questions remain to be answered, mainly\naround how this would deal with multiple permissions, whether it should allow\nblocking permissions, the spoofability of its UI and whether that poses a risk,\nthe customizability of its UI, and how revoking permissions would look like with\nit.<\/p>\n<h4 id=\"notes-and-resources-3\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-3\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/docs.google.com\/presentation\/d\/1fzMEeyWbdpBS7HN9WumIOSbqB3pl-MG2DTo_5-lvgus\/edit#slide=id.g27df7eff9c5_0_226\">TPAC Permission Control (public)<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1pJFCADgasiqojESz2VePkVwaDdlfDqpN5JSqo4T4mMs\/edit#heading=h.ocs3ne1w3v4g\">(public) Page Embedded Permission Control (Permission Element) - TPAC 2023 Breakout<\/a><\/li>\n<\/ul>\n<h3 id=\"the-future-of-powerful-apis-on-the-web-platform\" tabindex=\"-1\">The Future of Powerful APIs on the Web Platform <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#the-future-of-powerful-apis-on-the-web-platform\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>This TAG-initiated session stated the problem of powerful APIs on the Web,\nleading to permission fatigue and browsers simply not implementing certain APIs\nas a consequence, and motivated something like an extended trust mode for the\nWeb. Sangwhan Moon said that without all browser vendors agreeing, the situation\nwould not improve. Mozilla sort of soft-excluded the browser from the effort by\nstating that they were not thinking of messing with the origin model and to not\nassume that all capabilities were on the table. They also said as a community,\nwe shouldn't let envy of native capabilities drive this.<\/p>\n<h4 id=\"notes-and-resources-4\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-4\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/docs.google.com\/presentation\/d\/1-1Q-2206wTjWadU0NtXozEWyGZbnaz1ABHCWL_MCNaM\/edit#slide=id.p\">The Future of Powerful APIs on the Web Platform<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1vRO6xher_AiHDOkQIClgz4wCI8tEAJdHifLU-M2epOI\/edit#heading=h.xxa48zxk3cpj\">Powerful APIs TPAC 2023 Breakout minutes<\/a><\/li>\n<\/ul>\n<h3 id=\"privacy-principles\" tabindex=\"-1\">Privacy Principles <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#privacy-principles\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>This session introduced the\n<a href=\"https:\/\/www.w3.org\/TR\/privacy-principles\/\">privacy principles<\/a> jointly\ndeveloped by TAG and Privacy Interest Group\n(<a href=\"https:\/\/www.w3.org\/Privacy\/IG\/\">PING<\/a>) and solicited feedback from the persons\nin the room. The document is currently in wide review and seeks to be both\naspirational and practical. Each member of the author group outlined their\nfavorite sections of the document, like data minimization, device owners and\nadministrators, or execution context. I asked about a conscious opt-in for\nobjectively hard to understand things like <code>requestStorageAccess()<\/code> to which the\nanswer was to abstract as much as possible in the permission prompt.<\/p>\n<h4 id=\"notes-and-resources-5\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-5\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/raw.githack.com\/w3ctag\/privacy-principles\/main\/meetings\/2023-09-tpac\/breakout\/slides.html\">Slides<\/a><\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/13-privacy-principles-minutes.html\">Minutes<\/a><\/li>\n<\/ul>\n<h3 id=\"the-cross-browser-future-of-installable-web-apps\" tabindex=\"-1\">The cross-browser future of Installable Web Apps <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#the-cross-browser-future-of-installable-web-apps\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>This was a session I had organized together with Apple, Microsoft, and Intel. We\ndiscussed a number of approaches to installability taken by the various\nbrowsers, including new surfaces like sidebars and widgets\u2014a currently\nproprietary approach based on Microsoft's\n<a href=\"https:\/\/adaptivecards.io\/\">Adaptive Card<\/a> format. Of special interest was\nwhether criteria should be required before a Web app can be installed. Chrome\ntalked about the no longer required service worker. Apple insisted no\nrequirements at all should be made, not even a title or icon. Apple's\nrequirements for installable experiences are focused on ensuring consistent\nexperiences. Users should know exactly where to go in their device settings to,\nfor example, turn off Web push notifications, which require installation on iOS.\nWe ended talking about extensions and whether they should be exposed in\ninstalled apps. Currently, Chrome and Edge expose extensions, Safari doesn't.<\/p>\n<h4 id=\"notes-and-resources-6\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-6\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/docs.google.com\/presentation\/d\/1t_0WsgKFy2VmFY9lzpdLy00FgXK3Z9d0XJybOtCl-Tk\/edit#slide=id.p\">The cross-browser future of Installable Web Apps<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1QzHTKGDxHol7KybdqY-rll1VGd1FIirvW-mtAFxPjC4\/edit#heading=h.5wzb241vwwm2\">The cross-browser future of Installable Web Apps<\/a><\/li>\n<\/ul>\n<h3 id=\"installing-web-apps\" tabindex=\"-1\">Installing Web Apps <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#installing-web-apps\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>This was again a deep-dive in Microsoft's\n<a href=\"https:\/\/github.com\/MicrosoftEdge\/MSEdgeExplainers\/blob\/main\/WebInstall\/explainer.md\">Web Install API<\/a>\nproposal. Many points or arguments were already made in the\n<a href=\"https:\/\/onedrive.live.com\/edit?id=8D8B723D008546BD!949334&amp;resid=8D8B723D008546BD!949334\">WICG session on Tuesday<\/a>\n(same notes document as for the breakout session). A noteworthy new point was\nthe question if something like sidebar apps should be supported in a sense that\na PWA would be able to express it would like to be installed to the sidebar.\nApple said the baseline assumption of this API should not be that of an app\nstore; the API should be useful in itself. If stores are involved, how would\nstores know if an app was already installed through another store or mechanism?\nCould <code>getInstalledRelatedApps()<\/code> be the solution for this? Another point raised\nwas the trackability of installs, so stores could know if an installation was\ntriggered by them, and apps what store an install came from. Finally, we\ndiscussed double prompting, first a bootstrap prompt whether a store may install\napps in general, and then a concrete prompt to install a given app.<\/p>\n<h4 id=\"notes-and-resources-7\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-7\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/onedrive.live.com\/edit?id=8D8B723D008546BD!949334&amp;resid=8D8B723D008546BD!949334\">Minutes<\/a><\/li>\n<\/ul>\n<h2 id=\"thursday\" tabindex=\"-1\">Thursday <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#thursday\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<h2 id=\"devices-and-sensors\" tabindex=\"-1\">Devices and Sensors <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#devices-and-sensors\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<p>I spent Thursday in the Devices and Sensors Working Group meeting. The first\npart of the day was occupied by a charter discussion between Philippe Le H\u00e9garet\nfrom the W3C. The core question that was discussed was cross-deliverables\nbetween the Web Apps WG and the Devices and Sensors WG, since Apple can't commit\nto joining the Device and Sensors WG but is interested in some of the things the\ngroup is working on.<\/p>\n<p>Next, we looked at the privacy principles and how they are applied by some of\nthe specs. Marian Harbach briefly presented the <code>permission<\/code> element.<\/p>\n<p>In suite, Intel talked about testability improvements they made around\nWebDriver.<\/p>\n<p>Regarding Generic Sensors, we made a resolution to ensure Generic Sensor-based\nspecs have mitigations normatively defined for factory calibration device\nfingerprinting, matching\n<a href=\"https:\/\/w3c.github.io\/deviceorientation\/#security-and-privacy:~:text=The%20calibration%20of%20accelerometers%2C%20gyroscopes%20and%20magnetometers%20may%20reveal%20persistent%20details%20about%20the%20particular%20sensor%20hardware\">existing normative mitigations in the DeviceOrientation Events spec<\/a>.<\/p>\n<p>After that, we went through all the APIs in scope of the working group and\nlooked at their status:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t09\">Accelerometer<\/a>,\n<a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t10\">Gyroscope<\/a>, and\n<a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t11\">Magnetometer<\/a>, all with\nno issues.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t12\">Orientation Sensor<\/a> and\n<a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t13\">DeviceOrientation Events<\/a>\nin the context of spatial audio, referring to WebXR as the better home for the\nuse case.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t14\">Ambient Light Sensor<\/a>\nwith going through existing use cases.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t15\">Proximity Sensor<\/a> with no\nissues.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t16\">Geolocation Sensor<\/a> where\nwe went through the existing use cases for background geolocation and\ngeofencing again.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t17\">Screen Brightness API<\/a>\nwith no updates since Apple's negative feedback on an imperative API and after\nFran\u00e7ois Beaufort's\n<a href=\"https:\/\/github.com\/WICG\/screen-brightness\/issues\/1\">proposal<\/a> for an element\nattribute for increasing the screen brightness.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t18\">Screen Wake Lock API<\/a>\nwith some address-worthy implementer feedback from Apple.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t19\">System Wake Lock API<\/a>\nwith a discussion of use cases.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t20\">Contact Picker API<\/a> with\nno updates.<\/li>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t21\">Battery Status API<\/a> which\nmight be turned into a user preference media feature.<\/li>\n<\/ul>\n<p>Next, Intel gave a device market overview followed by an implementation overview\nincluding compelling use case demonstrations for the\n<a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t22\">Device Posture API<\/a>.\nFine-grained angle information was removed from the spec due to privacy\nconcerns.<\/p>\n<p>In the following, Intel continued on presenting on the\n<a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t23\">Compute Pressure API<\/a>, with\na special focus on cross-site tracking mitigations through randomization that\nwere proven to be effective in experiments, plus showing future extensions for\nthe API like memory stalls and an &quot;it's you&quot; hint when the current process is\nresponsible for CPU usage peaks.<\/p>\n<p>The day ended with a look at the\n<a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html#t26\">Geolocation API<\/a>, which is\nmostly stable but could add improvements around encouraging more coarse location\naccess.<\/p>\n<p>As a meta remark, I feel like as a working group, we didn't achieve much new\nthings compared to last year, mostly due to a lack of cross-implementer support\nfor some of the APIs like the generic sensor APIs, and only a limited appetite\nto move on with things vendors at least partially agree on like screen\nbrightness or ambient light sensor.<\/p>\n<h4 id=\"notes-and-resources-8\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-8\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/14-dap-minutes.html\">Minutes<\/a><\/li>\n<\/ul>\n<h2 id=\"friday\" tabindex=\"-1\">Friday <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#friday\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<h3 id=\"what-working-group\" tabindex=\"-1\">WHAT Working Group <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#what-working-group\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>On Friday, I saw an interesting\n<a href=\"https:\/\/github.com\/whatwg\/html\/issues\/5033\">proposal for a <code>headinglevelstart<\/code><\/a>\nattribute that would allow authors to embed content with a heading structure\ninto another context with an already existing heading structure, while overall\ncorrectly nesting both heading structures. This was mostly driven by GitHub, who\nembed<code>README.md<\/code> files into repository homepages and who wish to adjust heading\nlevels accordingly.<\/p>\n<p>Next, a\n<a href=\"https:\/\/github.com\/whatwg\/html\/issues\/5326\">focus navigation start point proposal<\/a>\nwas brought forward, which would allow to set the start point for the next focus\npoint (which is not the same as the focus). Again this was driven by GitHub, who\nwanted to make the file tree fully keyboard-navigable.<\/p>\n<p>Noteworthy was also a\n<a href=\"https:\/\/github.com\/WICG\/observable\">proposal for an Observable API<\/a> presented\nby Dominic Farolino , which would allow for more convenient event handling\nscenarios and that was greeted with great interest.<\/p>\n<h4 id=\"notes-and-resources-9\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-9\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/docs.google.com\/document\/d\/1V6_s_VsaWcI9J-ZATbIKKijn59JbVmRMsHXYyH29sho\/edit#heading=h.9gswhzv85q2\">Minutes: WHATWG session<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/presentation\/d\/1lPLUcm_yqR5couGwouETTkblhqgHfpgUBkm2mnmxegU\/edit#slide=id.p\">Observable API Presentation TPAC 2023<\/a><\/li>\n<\/ul>\n<h3 id=\"web-platform-incubator-community-group-1\" tabindex=\"-1\">Web Platform Incubator Community Group <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#web-platform-incubator-community-group-1\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>In the afternoon, I attended Web Incubator Community Group\n(<a href=\"https:\/\/wicg.io\/\">WICG<\/a>) sessions focused on the Accessibility Object Model\n(AOM), the Shape Detection API, and the File System.<\/p>\n<p>Unfortunately the AOM session was a little confusing and it was not entirely\nclear what the status of the AOM was and which parts of it are cross-browser vs.\nabandoned. The\n<a href=\"https:\/\/github.com\/WICG\/aom\/blob\/gh-pages\/explainer.md\">AOM explainer<\/a> contains\nmany abandoned sections and the <a href=\"https:\/\/wicg.github.io\/aom\/spec\/\">AOM spec<\/a> is\njust a barebones skeleton, plus the\n<a href=\"https:\/\/wicg.github.io\/aom\/demos\/tictactoe.html\">demo<\/a> doesn't work (anymore).<\/p>\n<p>For the\n<a href=\"https:\/\/developer.chrome.com\/articles\/shape-detection\/\">Shape Detection API<\/a>,\nthere's some interest from Apple to implement this. They raised questions about\nbatch processing and synchronization challenges with video, which would likewise\napply to blurring. I pointed at my <a href=\"https:\/\/mediastreamtrack.glitch.me\/\">demo<\/a>\nthat solves this with\n<a href=\"https:\/\/alvestrand.github.io\/mediacapture-transform\/chrome-96.html\">MediaStreamTrack Insertable Media Processing using Streams<\/a>.\nApple was also worried about the Chrome-specificity of the test suite and the\nfuture venue of the proposal, hinting it could be the\n<a href=\"https:\/\/www.w3.org\/groups\/wg\/webmachinelearning\">WebML WG<\/a>. As a final point, I\nnoted that Apple's implementation works, but only on the main thread and not in\nworkers. This is a known issue and &quot;for reasons&quot;, according to Apple.<\/p>\n<p>The File System Access session proposed by Austin Sullivan unluckily saw no\nattendance from Apple or Mozilla, so the meeting was adjourned since it would\nhave been Googlers preaching to Googlers (and Google Developer Expert\n<a href=\"https:\/\/christianliebel.com\/\">Christian Liebel<\/a>).<\/p>\n<h4 id=\"notes-and-resources-10\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-10\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/www.w3.org\/2023\/09\/15-wicg-minutes.html\">Minutes<\/a><\/li>\n<li><a href=\"https:\/\/docs.google.com\/presentation\/u\/1\/d\/1ouEXjfvkxM9WJmTg22Fb_qwMjXeOrZG1Aa3p97Fj3j0\/edit\">[TPAC 2023] WICG File System<\/a><\/li>\n<\/ul>\n<h3 id=\"web-app-security-working-group\" tabindex=\"-1\">Web App Security Working Group <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#web-app-security-working-group\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>On the end of the day, I crashed the Web App Security WG meeting and saw Mike\nWest's proposal for\n<a href=\"https:\/\/github.com\/mikewest\/purposeful-permissions\">purposeful permissions<\/a>. I\nmade the point for aligning with other efforts in this area in an\n<a href=\"https:\/\/github.com\/mikewest\/purposeful-permissions\/issues\/1\">issue<\/a>, namely the\nW3C MiniApp Manifest and Isolated Web Apps permissions.<\/p>\n<h4 id=\"notes-and-resources-11\" tabindex=\"-1\">Notes and resources <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#notes-and-resources-11\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h4>\n<ul>\n<li><a href=\"https:\/\/cryptpad.w3ctag.org\/code\/#\/2\/code\/edit\/Pq1xOhFZ9oxeI5vrXwx--B3a\/\">Minutes<\/a><\/li>\n<\/ul>\n<h2 id=\"meta-observations\" tabindex=\"-1\">Meta observations <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#meta-observations\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h2>\n<h3 id=\"covid-measures\" tabindex=\"-1\">Covid measures <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#covid-measures\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>Covid measures were strictly enforced during the indoor sessions with a masking\nmandate and encouraged daily testing. All the breaks and lunches were outside or\noutside-ish (partially in a well-vented tent). After hours at dinners and drinks\nat the hotel bar, everyone partaking in those activities took their masks off.\nThere were, I think, around 15 documented cases of infections.<\/p>\n<h3 id=\"in-person-event\" tabindex=\"-1\">In-person event <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#in-person-event\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>It was really, really great to be able to do in-person events again. While the\ngroup meetings worked pretty well with remote attendance (both from across the\nworld, or from the conference hotel if you caught Covid), the famous hallway\ntrack and spending time with people at dinner or after-hours drinks is just not\nreplaceable by video conferencing technology.<\/p>\n<h3 id=\"food\" tabindex=\"-1\">Food <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#food\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>Food was boxed lunches with the now infamous soggy potato chips and each day a\nvariety of pre-packed industrial sandwiches. It felt wasteful, since there was a\nlot of food in a lot of packaging. Maybe a buffet-style lunch would have been\nbetter. There was typically an early dinner train, which ended up in one of the\ntourist trap-ish restaurants in old town that open early compared to local\nSpanish dinner times. My food quality indicator was always to check the bread:\nif it's plastic-sealed, the food will be fine; if it's fresh, it will be\namazing.<\/p>\n<p>Coffee was available in the breaks, and either horrible if you got the milk\ndirectly from the machine, or great if you got the milk separately from a\nwaiter.<\/p>\n<h3 id=\"google-attendance\" tabindex=\"-1\">Google attendance <a class=\"direct-link\" href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/#google-attendance\" aria-hidden=\"true\">\ud83d\udd17<\/a><\/h3>\n<p>There were (again) a lot of people from Google in attendance. This year, we made\na concerted effort to highlight more closely what team we represent, for\nexample, Google Chrome, rather than all of Google. More than once, I saw other\npeople mirror this, and introduce themselves as &quot;from the X team at Y&quot;.<\/p>\n\n\t\t\t<p>\n\t\t\t\t<img alt=\"Thomas Steiner\" width=\"32\" height=\"32\" src=\"https:\/\/blog.tomayac.com\/feed.php?dl=https%3A%2F%2Fblog.tomayac.com%2F2023%2F09%2F25%2Fw3c-tpac-2023-trip-report%2F&dp=%2F2023%2F09%2F25%2Fw3c-tpac-2023-trip-report%2F&dt=W3C%20TPAC%202023%20Trip%20Report\" alt=\"\">\n\t\t\t\t<br\/>This post appeared first on <a href=\"https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/\">https:\/\/blog.tomayac.com\/2023\/09\/25\/w3c-tpac-2023-trip-report\/<\/a>.\n\t\t\t<\/p>\n\t\t","protected":false},"excerpt":{"rendered":"<p>\t\t\tBackground \ud83d\udd17<br \/>\nThe 2023 edition of the World Wide Web Consortium (W3C) Technical Plenary and<br \/>\nAdvisory Committee (TPAC) meeting took place from September 11 to 15 in the<br \/>\nMeli\u00e3 hotel in Seville,<br \/>\nSpain. The hotel is located right next to the<br \/>\nPlaza de Es&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"intlwemo_wallet_address":"","footnotes":""},"categories":[],"tags":[],"class_list":["post-3493","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/posts\/3493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/comments?post=3493"}],"version-history":[{"count":5,"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/posts\/3493\/revisions"}],"predecessor-version":[{"id":3565,"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/posts\/3493\/revisions\/3565"}],"wp:attachment":[{"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/media?parent=3493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/categories?post=3493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tomayac.com\/wordpress\/wp-json\/wp\/v2\/tags?post=3493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}