Re: [Tools-discuss] [111attendees] Why do we allow people to edit CodiMD meeting notes who are not logged in?

Robin Marx <robin.marx@kuleuven.be> Mon, 02 August 2021 08:08 UTC

Return-Path: <robin.marx@kuleuven.be>
X-Original-To: tools-discuss@ietfa.amsl.com
Delivered-To: tools-discuss@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 989983A1286 for <tools-discuss@ietfa.amsl.com>; Mon, 2 Aug 2021 01:08:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.896
X-Spam-Level:
X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ToSXW45ASeKc for <tools-discuss@ietfa.amsl.com>; Mon, 2 Aug 2021 01:08:07 -0700 (PDT)
Received: from icts-p-cavuit-4.kulnet.kuleuven.be (icts-p-cavuit-4.kulnet.kuleuven.be [134.58.240.134]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F23933A1284 for <tools-discuss@ietf.org>; Mon, 2 Aug 2021 01:08:06 -0700 (PDT)
X-KULeuven-Envelope-From: robin.marx@kuleuven.be
X-KULeuven-Scanned: Found to be clean
X-KULeuven-ID: 593CB18E.A3394
X-KULeuven-Information: Katholieke Universiteit Leuven
Received: from icts-p-ceifnet-smtps-1.kuleuven.be (icts-p-ceifnet-smtps.service.icts.svcd [IPv6:2a02:2c40:0:51:141:242:ac11:1d]) by icts-p-cavuit-4.kulnet.kuleuven.be (Postfix) with ESMTP id 593CB18E for <tools-discuss@ietf.org>; Mon, 2 Aug 2021 10:07:57 +0200 (CEST)
X-CAV-Cluster: smtps
Received: from ICTS-S-EXMBX25.luna.kuleuven.be (icts-s-exmbx25.luna.kuleuven.be [10.112.11.60]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by icts-p-ceifnet-smtps-1.kuleuven.be (Postfix) with ESMTPS id 32B1AD4F71BD3; Mon, 2 Aug 2021 10:07:57 +0200 (CEST)
Received: from ICTS-S-EXMBX25.luna.kuleuven.be (10.112.11.60) by ICTS-S-EXMBX25.luna.kuleuven.be (10.112.11.60) with Microsoft SMTP Server (TLS) id 15.0.1497.2; Mon, 2 Aug 2021 10:07:56 +0200
Received: from ICTS-S-EXMBX25.luna.kuleuven.be ([fe80::95e5:f544:83cb:4f98]) by ICTS-S-EXMBX25.luna.kuleuven.be ([fe80::95e5:f544:83cb:4f98%19]) with mapi id 15.00.1497.015; Mon, 2 Aug 2021 10:07:56 +0200
X-Kuleuven: This mail passed the K.U.Leuven mailcluster
From: Robin Marx <robin.marx@kuleuven.be>
To: John Levine <ietf@johnlevine.com>, "tools-discuss@ietf.org" <tools-discuss@ietf.org>, "111attendees@ietf.org" <111attendees@ietf.org>
CC: "stephen.farrell@cs.tcd.ie" <stephen.farrell@cs.tcd.ie>
Thread-Topic: [111attendees] Why do we allow people to edit CodiMD meeting notes who are not logged in?
Thread-Index: AQHXhYVF3Y3PSlmN1EW2J9yE70IWGKtb7OcAgAAYYgCAATthgIAAD+GAgAAJKoCAAULwgIAAD8EAgABNEwCAAAlQAIAA3Kow
Date: Mon, 02 Aug 2021 08:07:56 +0000
Message-ID: <49976630e58949fca366641118be302f@ICTS-S-EXMBX25.luna.kuleuven.be>
References: <daaf0898-fcaf-341b-a710-9c459edebdc1@cs.tcd.ie> <20210801205621.427F0257240C@ary.qy>
In-Reply-To: <20210801205621.427F0257240C@ary.qy>
Accept-Language: en-GB, nl-BE, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.112.50.1]
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/tools-discuss/SThiokWQxGF-6LN5koGFjDwT6-A>
X-Mailman-Approved-At: Mon, 02 Aug 2021 08:10:26 -0700
Subject: Re: [Tools-discuss] [111attendees] Why do we allow people to edit CodiMD meeting notes who are not logged in?
X-BeenThere: tools-discuss@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: IETF Tools Discussion <tools-discuss.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tools-discuss>, <mailto:tools-discuss-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tools-discuss/>
List-Post: <mailto:tools-discuss@ietf.org>
List-Help: <mailto:tools-discuss-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tools-discuss>, <mailto:tools-discuss-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Aug 2021 08:08:12 -0000

In my experience as a frequent minutes taker, it would also be helpful to have a "login with datatracker" button 
somewhere easily accessible when landing on the page for a specific session (linked from the agenda), 
without having to go to the main CodiMD landing page first
(assuming that popup won't auto-show if the behavior would change or if the current behavior is kept). 

-----Original Message-----
From: 111attendees <111attendees-bounces@ietf.org> On Behalf Of John Levine
Sent: zondag 1 augustus 2021 22:56
To: tools-discuss@ietf.org; 111attendees@ietf.org
Cc: stephen.farrell@cs.tcd.ie
Subject: Re: [111attendees] Why do we allow people to edit CodiMD meeting notes who are not logged in?

It appears that Stephen Farrell  <stephen.farrell@cs.tcd.ie> said:
>
>On 01/08/2021 16:47, Carsten Bormann wrote:
>> OK, so the summary of the 111attendees discussion is that we don’t 
>> want unauthenticated write access to meeting notes.

>Really? Seems to me the risk isn't significant enough to make someone 
>do work and there's plenty of opportunity to read the draft meeting 
>notes. I don't really object to requiring note takers be authenticated 
>but it doesn't seem that worthwhile.

If they're in the meetecho session, they're already authenticated, so I'm having a little trouble coming up with a scenario in which someone who isn't there needs to change he minutes.

R's,
John

--
111attendees mailing list
111attendees@ietf.org
https://www.ietf.org/mailman/listinfo/111attendees