What is the Web Security IG ?

Context : Once upon a time, a web security ig was created, and then was forgotten. Two pionneers, wendy and virginie, woke it up and rebuilt the community. It has now a large to do list, more then the community can afford

• Scope : a security expert community discussing new web features
• Community : about 15 people, mainly security and privacy geeks/chairs
• Working method : one call a month and mailing list
• Our current problem : identity priorities and find ressources

What is the current Web Security IG 'to do' list ?

We made a call for ideas, listened to the members, and got that list !

• Specifications security reviews, including security guidelines
• Developping new features (protocol, security enabler, securing ressources, security indicator, certificate management...)
• Mobile security analysis
• Understanding the web security model
• Scouting security

See Web Security IG wiki

[You may think it is not your problem ...]

But, yes, it is...

• If you plan to deploy on the open web platform sensitive services
• If you think that pervasive monitoring is a threat
• If you want a reliable and trusted open web platform

... W3C cannot afford to miss the security expectation

How can you help ?

When going back home ...

• talk to your web security architects/experts about the Web Security IG wiki
• tell us what new security features are important for your business
• send us someone to help in the specification security reviews

Thank You !

Keep in touch by mail virginie.galindo@gemalto.com, Twitter @poulpita , LinkedIn Virginie Galindo