19:00:42 #startmeeting 19:00:42 Meeting started Thu Feb 27 19:00:42 2020 UTC. The chair is wumpus. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:00:42 Useful Commands: #action #agreed #help #info #idea #link #topic. 19:00:44 elichai2: thanks! your siphash pr and suhas' wtxid one are top of my list 19:01:15 hi 19:01:18 hi 19:01:20 Hi 19:01:47 hi 19:01:52 hi 19:01:56 hi 19:02:06 #bitcoin-core-dev Meeting: wumpus sipa gmaxwell jonasschnelli morcos luke-jr sdaftuar jtimon cfields petertodd kanzure bluematt instagibbs phantomcircuit codeshark michagogo marcofalke paveljanik NicolasDorier jl2012 achow101 meshcollider jnewbery maaku fanquake promag provoostenator aj Chris_Stewart_5 dongcarl gwillen jamesob ken281221 ryanofsky gleb moneyball kvaciral ariard digi_james amiti fjahr 19:02:07 jeremyrubin lightlike emilengler jonatack hebasto jb55 19:02:09 hi 19:02:13 hi 19:02:14 hi 19:02:28 hi 19:02:35 hi 19:02:38 hi 19:03:05 two proposed topics in proposedmeetingtopics: macOS notarization (jonasschnelli), more topic collection for upcoming physical meeting (kanzure) 19:04:00 any last minute topics? 19:04:29 FWIW 0.20.0 feature freeze is in about half a month 19:04:45 hi 19:04:58 see for schedule: https://github.com/bitcoin/bitcoin/issues/17432 19:05:10 #topic High priority for review 19:05:44 7 blockers, 1 bugfix, 6 chasing concept ACK in https://github.com/bitcoin/bitcoin/projects/8 19:06:04 Add #18115 19:06:08 https://github.com/bitcoin/bitcoin/issues/18115 | wallet: Pass in transactions and messages for signing instead of exporting the private keys by achow101 · Pull Request #18115 · bitcoin/bitcoin · GitHub 19:06:13 +1 19:07:33 added 19:08:12 anything else to add/remove, or that is ready for merge? 19:08:47 I was hoping #17509 is ready, though maybe meshcollider can review first (it's not strictly wallet) 19:08:49 https://github.com/bitcoin/bitcoin/issues/17509 | gui: save and load PSBT by Sjors · Pull Request #17509 · bitcoin/bitcoin · GitHub 19:09:03 that one does seem the closest 19:09:20 hi 19:09:27 hi 19:09:41 hi 19:09:59 provoostenator: sure, I can review it :) Missed it actually sorry because it's only tagged GUI 19:10:16 hi 19:10:27 If it makes it in, I pre-nominate gwillen's #18027 after that, nice to get that in for the feature freeze 19:10:30 https://github.com/bitcoin/bitcoin/issues/18027 | "PSBT Operations" dialog by gwillen · Pull Request #18027 · bitcoin/bitcoin · GitHub 19:10:44 yeah that would be awesome ^ 19:10:48 that would be very nice 19:10:58 Can I add #17809 to high prio? It is a lot of changes, but shouldn't be too hard to review. 19:11:02 https://github.com/bitcoin/bitcoin/issues/17809 | rpc: Auto-format RPCResult by MarcoFalke · Pull Request #17809 · bitcoin/bitcoin · GitHub 19:11:06 no need to open up -cli/console for anything PSBT related 19:11:07 +1 19:11:21 MarcoFalke: sure 19:12:10 added 19:13:31 #topic macOS notarization (jonasschnelli) 19:13:33 We could try #18187 on v0.19.1rc3; if that's the only change it can be tested very quickly. 19:13:35 https://github.com/bitcoin/bitcoin/issues/18187 | Add macOS notarization (including stapling) by jonasschnelli · Pull Request #18187 · bitcoin/bitcoin · GitHub 19:13:52 18187 is pretty much it 19:14:07 do we need a 0.19.1rc3? 19:14:12 It changes the process how we create the final macOS app 19:14:35 for the notarization, we don't need a rc3 I think... but it could help 19:14:36 It adds a staple to the signed binary, which is better for privacy 19:14:43 thanks for working on this btw 19:14:47 And something we should test ideally 19:14:52 yes. 19:15:18 if there are any questions or possible problems (privacy / security), ask now! :) 19:15:23 yes, we could do a rc3 just to test this, though I think many would like 0.19.1 out of the door, and we could test this for 0.20.0rc1 as well it takes somewhat longer but dunno 19:15:50 it's more in line with the usual flow of doing things on master first 19:16:07 but no strong opinion 19:16:13 True, but it's nice to test this on a smaller demographic than the 0.20 release 19:16:24 We can notarize 0.19.1 anyways (even without 18187) 19:16:37 I think targeting the pull for 0.20 makes sense 19:16:41 do you think 0.20.0rc1 will have a larger demograhic? 19:17:03 0.20.0 likely will have bigger adoption than 0.19.1 19:17:11 don't know about the rc's 19:17:15 Maybe we skip 0.19.1 and focus on a rc 19:17:16 That's what I mean. The rc I can test myself 19:17:17 a lot of people wait for .1 fwiw 19:17:22 don't know about rcs 19:17:26 There is the risk that we corrupt the final dmg otherwise 19:17:45 no strong opinion either way here 19:18:08 ok, lets just merge it for 0.20 then 19:18:16 if I publish the notarization ticket together with the code signature, it would automatically end up in the final dmg 19:18:20 then backport if it works 19:18:22 but we had no test if we go for 0.19.1 19:18:32 I don't like the privacy implications of not stapling, so then I suggest we don't notarize it, and just leave it right-click to install 19:18:39 yes. Lets merge and do the process only for 0.20rcX 19:18:56 provoostenator: thats a good point. 19:19:10 But no-one AFAIK has done a privacy related test. 19:19:23 We don't know if the GateKeeper server will not be contacted if the ticket is stapled 19:19:30 I haven't tested it (yet) 19:19:39 But very likely its completely offline 19:20:10 Well, if not, then they might as well ping gatekeeper for non-notarized binaries too and that's the end of macOS privacy :-) 19:20:35 Yes. There are little more we can do... 19:20:48 that's what happens with platforms closing up 19:21:11 Cory Doctorow was right with his war on general purpose computing 19:21:22 Yeah. I guess the staping concept is probably acceptable. 19:21:36 But yeah. It's the digital war agains terrorism 19:21:45 (== - privacy) 19:21:47 yep 19:22:10 What if we notarize 0.19.1 without stapeling? 19:22:21 okay, one topic left 19:22:25 It would run without changing the security settings 19:22:40 #topic more topic collection for upcoming physical meeting (kanzure) 19:22:44 But it would potentially doxx users to Apple 19:22:51 hey yeah just a reminder that we have a meeting in a month and i'm collecting topics 19:23:01 need to poke jnewbery for survey entries iirc 19:23:25 provoostenator: lets talk on 18187 19:23:27 i have a short document with a list of things that people have asked about. 19:24:51 that's all 19:24:59 in other news, HWI irc logs are now available http://gnusha.org/hwi/ 19:25:26 great! 19:26:46 #endmeeting