The W3C’s mission is to make the Web work based on the principles of accessibility, internationalization, privacy, and security.
+W3C’s mission is to make the Web work based on the principles of accessibility, internationalization, privacy, and security.
The last two principles, Privacy and Security, are integral to human rights and civil liberties and have always been of the Consortium's concern.
Also, in the Ethical Web Principles, there are several principles related to security both as a societal impact The web does not cause harm to society and in terms of people's security The web is secure, and respects peoples' privacy, where the goal is to create technology that creates as few threats as possible, or mitigates those threats
Several working groups deal with security issues, such as developing mechanisms and best practices which improve the security of Web Applications, develping strong authentication functionality for Web Applications, developing APIs to allow a website to request an identity credential securely, and enhancing the security and interoperability of various Web payments technologies.
@@ -180,9 +179,32 @@Updated document status is available on the group publication status page.
-Self-Review Questionnaire for Security and Privacy: In joint with W3C's Technical Architecture Group (TAG) and PING, with a specific focus on Security aspect.
-Threat Modeling guide: in joint with relevant groups such as TAG, PING, and the Threat Modeling Community Group, a guide that contains both generic threat modeling elements to facilitate activities along with groups creating technology, and also to understand threats of different types.
-Security Request Issue template: to facilitate the request of Security Reivews.
++ In joint with W3C's Technical Architecture Group (TAG) and PING, with a specific focus on Security aspect. +
++ In joint with relevant groups such as TAG, PING, and the Threat Modeling Community Group, a guide that contains both generic threat modeling elements to facilitate activities along with groups creating technology, and also to understand threats of different types. +
++ To facilitate the request of Security Reivews. +
+SING may publish other documents consistent with the above scope, such as analyses of security issues, prototype specifications, security principles, threat models, and guidelines for standards.