Skip to content

Commit

Permalink
minor issues of the SING draft charter
Browse files Browse the repository at this point in the history
  • Loading branch information
siusin committed Jul 31, 2024
1 parent 51eab39 commit 2c1619e
Showing 1 changed file with 27 additions and 5 deletions.
32 changes: 27 additions & 5 deletions 2024/ig-security.html
Original file line number Diff line number Diff line change
Expand Up @@ -60,7 +60,6 @@
<li><a href="#participation">Participation</a></li>
<li><a href="#communication">Communication</a></li>
<li><a href="#decisions">Decision Policy</a></li>
<li><a href="#patentpolicy">Patent Policy</a></li>
<li><a href="#patentpolicy">Patent Disclosures</a></li>
<li><a href="#licensing">Licensing</a></li>
<li><a href="#about">About this Charter</a></li>
Expand Down Expand Up @@ -151,7 +150,7 @@ <h1 id="title">PROPOSED Security Interest Group Charter</h1>

<div id="background" class="background">
<h2>Motivation and Background</h2>
<p>The W3C’s mission is to make the Web work based on the principles of accessibility, internationalization, privacy, and security.</p>
<p>W3C’s mission is to make the Web work based on the principles of accessibility, internationalization, privacy, and security.</p>
<p>The last two principles, Privacy and Security, are integral to <a href="https://www.un.org/en/about-us/universal-declaration-of-human-rights" alt="Article 3: Everyone has the right to life, liberty and security of person.">human rights</a> and <a href="https://www.ohchr.org/en/instruments-mechanisms/instruments/international-covenant-civil-and-political-rights" title="Article 9: Everyone has the right to liberty and security of person">civil liberties</a> and have always been of the Consortium's concern.</p>
<p>Also, in the <a href="https://www.w3.org/TR/ethical-web-principles/">Ethical Web Principles</a>, there are several principles related to security both as a societal impact <a href="https://www.w3.org/TR/ethical-web-principles/#noharm">The web does not cause harm to society</a> and in terms of people's security <a href="https://www.w3.org/TR/ethical-web-principles/#privacy">The web is secure, and respects peoples' privacy</a>, where the goal is to create technology that creates as few threats as possible, or mitigates those threats</p>
<p>Several working groups deal with security issues, such as <a href="https://www.w3.org/groups/wg/webappsec/">developing mechanisms and best practices which improve the security of Web Applications</a>, <a href="https://www.w3.org/groups/wg/webauthn/">develping strong authentication functionality for Web Applications</a>, <a href="https://www.w3.org/groups/wg/fedid/">developing APIs to allow a website to request an identity credential securely</a>, and <a href="https://www.w3.org/groups/ig/securepay/">enhancing the security and interoperability of various Web payments technologies</a>.</p>
Expand Down Expand Up @@ -180,9 +179,32 @@ <h2>
</h2>

<p>Updated document status is available on the <a href="https://www.w3.org/groups/ig/@@/publications">group publication status page</a>.</p>
<p><a href="https://www.w3.org/TR/security-privacy-questionnaire/">Self-Review Questionnaire for Security and Privacy</a>: In joint with W3C's <a href="https://www.w3.org/2001/tag/">Technical Architecture Group (TAG)</a> and <a href="https://www.w3.org/groups/ig/privacy/">PING</a>, with a specific focus on Security aspect.</p>
<p>Threat Modeling guide: in joint with relevant groups such as TAG, PING, and the <a href="https://www.w3.org/groups/cg/tmcg/">Threat Modeling Community Group</a>, a guide that contains both generic threat modeling elements to facilitate activities along with groups creating technology, and also to understand threats of different types.</p>
<p><a href="https://github.com/w3c/security-request/issues/new/choose">Security Request Issue template</a>: to facilitate the request of Security Reivews.</p>
<dl>
<dt id="SPQ" class="spec">
<a href="https://www.w3.org/TR/security-privacy-questionnaire/">Self-Review Questionnaire for Security and Privacy</a>
</dt>
<dd>
<p>
In joint with W3C's <a href="https://www.w3.org/2001/tag/">Technical Architecture Group (TAG)</a> and <a href="https://www.w3.org/groups/ig/privacy/">PING</a>, with a specific focus on Security aspect.
</p>
</dd>
<dt id="TMG" class="spec">
Threat Modeling guide
</dt>
<dd>
<p>
In joint with relevant groups such as TAG, PING, and the <a href="https://www.w3.org/groups/cg/tmcg/">Threat Modeling Community Group</a>, a guide that contains both generic threat modeling elements to facilitate activities along with groups creating technology, and also to understand threats of different types.
</p>
</dd>
<dt id="SRIT" class="spec">
<a href="https://github.com/w3c/security-request/issues/new/choose">Security Request Issue template</a>
</dt>
<dd>
<p>
To facilitate the request of Security Reivews.
</p>
</dd>
</dl>
<p>SING may publish other documents consistent with the above scope, such as analyses of security issues, prototype specifications, security principles, threat models, and guidelines for standards.</p>

</section>
Expand Down

0 comments on commit 2c1619e

Please sign in to comment.