Re: CfC to publish Threat Modeling Guide as a First Public DraftNote < 2026-01-14 as a First Public Draft Interest Group Note < 2026-01-14

I support publishing as well, the guide is very detailed (used it for the
recent review) kudos to the team!
I opened up a few issues as suggestions, but nothing pressing :)

regards,
Nishant

On Wed, Jan 7, 2026 at 11:01 AM Manu Sporny <msporny@digitalbazaar.com>
wrote:

> I support publishing as well -- thank you for all the work that has
> gone into this document to date!
>
> On Wed, Jan 7, 2026 at 1:46 PM Joe Andrieu <joe@legreq.com> wrote:
> >
> > * I support the publishing of the "Threat Modeling Guide”.
> >
> > It needs more work before publishing as a NOTE, but its a good starting
> draft.
> >
> > On Tue, Jan 6, 2026 at 8:36 AM Simone Onofri <simone@w3.org> wrote:
> >>
> >> Dear Group,
> >>
> >> This is a Call for Consensus (CfC) for the Group publishing the “Threat
> Modeling Guide” and for enabling autopublish.
> >>
> >> [[
> >> This document describes when, why, and how to perform threat modeling
> during the development of a specification at the World Wide Web Consortium
> (W3C). This is designed to help standards developers understand threats and
> countermeasures from the beginning of standard development and to document
> the model in the security considerations section.
> >> ]]
> >>
> >> During the 2026-01-06 meeting, the participants had already agreed. To
> ensure everyone has an opportunity to weigh in, this will serve as a record
> of the group's decision, one way or another.
> >>
> >> The deliverable is available for inspection here:
> >>
> >> https://w3c.github.io/threat-modeling-guide/
> >>
> >> In response, please state one of the following:
> >>
> >> * I support the publishing of the "Threat Modeling Guide”.
> >> * I do not support the publishing of the "Threat Modeling Guide”, but
> it's fine if we decide to proceed
> >> * I object to the adoption of the "Threat Modeling Guide” due to Issues
> filed in the open issue <#number> of the securityig repository
> >>
> >> If there are no further objections, we will confirm the decision by
> February 21, 2025, at midnight Pacific time.
> >>
> >> Just so you know, if the deliverable is published, it will be marked as
> a First Group Note Draft, which does not imply W3C endorsement.
> >>
> >> Please respond by 2026-01-14; at that point, this CfC will be closed.
> >>
> >> Thank you,
> >>
> >> Simone
> >>
> >
> >
> > --
> > Joe Andrieu
> > President
> > joe@legreq.com
> > +1(805)705-8651
> > ________________________________
> > Legendary Requirements
> > https://legreq.com
> >
>
>
>
> --
> Manu Sporny - https://www.linkedin.com/in/manusporny/
> Founder/CEO - Digital Bazaar, Inc.
> https://www.digitalbazaar.com/
>
>

Received on Thursday, 8 January 2026 01:37:31 UTC