#768: VISS (Vehicle Information Service Specification) 2 Core and VISS 2 Transport

Visit on Github.

Opened Aug 31, 2022

Wotcher TAG!

I'm requesting a TAG review of VISS 2 specifications.

[One paragraph summary of idea, ideally copy-pasted from Explainer introduction]

VISS is specifying a means to access vehicle signals data in a standardized way. The Data model is defined in another specification (VSS, jointly developed by W3C and COVESA).

  • Explainer¹ (minimally containing user needs and example code): https://github.com/w3c/automotive/blob/gh-pages/viss2-explainer.md

  • Specification URL: https://www.w3.org/TR/viss2-core/ and https://www.w3.org/TR/viss2-transport/

  • Tests: [wpt folder(s), if available] None

  • User research: [url to public summary/results of research] N/A

  • Security and Privacy self-review²: The scope of this specification is narrow and does not describe a specific data model (VSS does describe such a model). That makes it rather difficult to analyze the privacy risks (in particular identify the information that could be particularly sensitive, although PII is not the core of data like what VSS describes). The WG and CG have also worked on best practices (https://www.w3.org/community/autowebplatform/wiki/Best_Practices). VISS 2 has improved on security and privacy thanks to the access control features of the protocol (see https://www.w3.org/TR/viss2-core/#access-control-model). The WG has also started studying other privacy-improving techniques like geofencing but it is clearly out-of-scope for these specifications.

  • GitHub repo (if you prefer feedback filed there): https://github.com/w3c/automotive

  • Primary contacts (and their relationship to the specification):

    • Carine Bournez (caribouW3), W3C staff
    • Ted Guild (tguild), Geotab, WG Chair
  • Organization(s)/project(s) driving the specification: W3C Automotive WG, COVESA

  • Key pieces of existing multi-stakeholder review or discussion of this specification:

  • External status/issue trackers for this specification (publicly visible, e.g. Chrome Status):

Further details:

  • I have reviewed the TAG's Web Platform Design Principles
  • Relevant time constraints or deadlines: [please provide]
  • The group where the work on this specification is currently being done:
  • The group where standardization of this work is intended to be done (if current group is a community group or other incubation venue):
  • Major unresolved issues with or opposition to this specification:
  • This work is being funded by:

We'd prefer the TAG provide feedback as (please delete all but the desired option):

🐛 open issues in our GitHub repo for each point of feedback

Discussions

2022-10-17

Minutes

Amy: user need not specified... explainer also doesn't really say how it works

Max: agree to add this to the explainer

Yves: do they have list of differences between VISS 1 and 2?

Amy: I'll look over what we've reviewed in the past and leave a comment

comments to be left asking for clarity

2022-10-31

Minutes

Amy: left a comment last week, no response

Hadley: is there another way we can nudge them?

Dan: can ping on slack

[bump a couple of weeks]

2022-11-14

Minutes

Amy: chaneged milestone to next week. Asked for a better explainer. Talked about nudging the team contact...

2022-12-12

Minutes

Amy: I had a chat with Sam W about this, PING are reviewing as well - deferred on doing a full review as they didn't have a full explainer. They've posted an update... http section is still tbc. They have a longer explainer now.

Dan: similar discussion to miniapp...

Amy: app store model...

Amy: I'll do a proper review. They didn't do a privacy & security... so "nothing to do with PII" - which is not what the questionnaire is about.

Dan: web security model.

Hadley: that privacy and security questionnaire is important for this. It would be good to see.

Dan: leaves a comment

2022-12-19

Minutes

Amy: they haven't responded...

bumped to next year

2023-03-13

Minutes

Dan: comment from Amy from 9 feb

Hadley: we're waiting form them to write an explainer...

Yves: they are working on it...

2023-03-27

Minutes

Hadley: did they check back?

Max: not yet.

Dan: puts on agenda for 10-april week if we haven't heard back by then maybe we close.

2023-05-15

Minutes

Hadley: still stalled.

2023-07-17

Minutes

Amy: Explainer, no user needs, too high level - we asked them to re-write - they have also not filled out the security & privacy questionnaire. No action recently.

Dan: marks as stalled and closes

2024-01-london

Minutes

Martin: WG has closed

[poke around what status the spec got to, doesn't seem to be far]

Hadley: closes