Logistics

• Date & Time: Tuesday 3rd June at 10:00 CEST (local time)
• URL: https://meet.jit.si/WEH2025-Web-Platform
• Notes: https://github.com/Igalia/webengineshackfest/wiki/2025-Web-Platform:-What-are-we-working-on%3F
• Room: HTML

Facilitator(s)

@simoneonofri (W3C)

Summary

At W3C, we are creating a "Threat Model for the Web". In this context, user agents par excellence—such as browsers—are an important element of the Web Platform.

One of the simplest (but not easiest) ways to create a Threat Model is to use Shostack's “4 Question Frame”:

1. What are we working on?
2. What can go wrong?
3. What are we going to do about it?
4. Did we do a good job?

So the purpose of the session is to first prepare the answer to the first question by collaboratively creating a Data Flow Diagram (DFD) of the Web Platform.

Materials

• Bibliographic research
• DFD version 1
• Editor's Draft
• Slides

Type

Remote

Other comments

I'll mark it as remote, hoping to be able to be on-site.