Threat Modeling Community Group

Hello WG,

Last week, TMCG had its first meeting; slides are available:
https://docs.google.com/presentation/d/1Fq-71mkxbV2mQHEi52rqikWZKkE5RF8gI9X5QTTrqTg

We also started a very brief round using a digital deck of LINDDUN cards 
(linked from the slide deck).

LWS WG charter states that a non-normative Threat Model note may be 
published.
https://www.w3.org/2024/09/linked-web-storage-wg-charter.html#threat-model

It also links CG's very rough Security Considerations draft as an input.

First of all, I would like to encourage potential authors and editors of 
LWS TM to join W3C TMCG.

Besides that, tomorrow during the CG meeting, I will make a very short 
demo of a well-known vulnerability. I hope to prepare demos of other 
vulnerabilities once or twice a month. Preferably with increasing 
complexity.

I would also like to ask if there is some specific online space where I 
could follow WG's work related to security, privacy, and overall threat 
modeling.

I wish you all productive face-to-face,
elf Pavlik

Received on Wednesday, 8 October 2025 02:23:55 UTC