- From: Nishant Jain <jain.nishant777@gmail.com>
- Date: Wed, 7 Jan 2026 17:31:40 -0800
- To: Manu Sporny <msporny@digitalbazaar.com>
- Cc: Joe Andrieu <joe@legreq.com>, Simone Onofri <simone@w3.org>, public-security@w3.org
- Message-ID: <CAGzdBhTb1dyxghSFGnv5VG_cmCi6MeN-ZucUUWxY7kWPD=iZzQ@mail.gmail.com>
I support publishing as well, the guide is very detailed (used it for the recent review) kudos to the team! I opened up a few issues as suggestions, but nothing pressing :) regards, Nishant On Wed, Jan 7, 2026 at 11:01 AM Manu Sporny <msporny@digitalbazaar.com> wrote: > I support publishing as well -- thank you for all the work that has > gone into this document to date! > > On Wed, Jan 7, 2026 at 1:46 PM Joe Andrieu <joe@legreq.com> wrote: > > > > * I support the publishing of the "Threat Modeling Guide”. > > > > It needs more work before publishing as a NOTE, but its a good starting > draft. > > > > On Tue, Jan 6, 2026 at 8:36 AM Simone Onofri <simone@w3.org> wrote: > >> > >> Dear Group, > >> > >> This is a Call for Consensus (CfC) for the Group publishing the “Threat > Modeling Guide” and for enabling autopublish. > >> > >> [[ > >> This document describes when, why, and how to perform threat modeling > during the development of a specification at the World Wide Web Consortium > (W3C). This is designed to help standards developers understand threats and > countermeasures from the beginning of standard development and to document > the model in the security considerations section. > >> ]] > >> > >> During the 2026-01-06 meeting, the participants had already agreed. To > ensure everyone has an opportunity to weigh in, this will serve as a record > of the group's decision, one way or another. > >> > >> The deliverable is available for inspection here: > >> > >> https://w3c.github.io/threat-modeling-guide/ > >> > >> In response, please state one of the following: > >> > >> * I support the publishing of the "Threat Modeling Guide”. > >> * I do not support the publishing of the "Threat Modeling Guide”, but > it's fine if we decide to proceed > >> * I object to the adoption of the "Threat Modeling Guide” due to Issues > filed in the open issue <#number> of the securityig repository > >> > >> If there are no further objections, we will confirm the decision by > February 21, 2025, at midnight Pacific time. > >> > >> Just so you know, if the deliverable is published, it will be marked as > a First Group Note Draft, which does not imply W3C endorsement. > >> > >> Please respond by 2026-01-14; at that point, this CfC will be closed. > >> > >> Thank you, > >> > >> Simone > >> > > > > > > -- > > Joe Andrieu > > President > > joe@legreq.com > > +1(805)705-8651 > > ________________________________ > > Legendary Requirements > > https://legreq.com > > > > > > -- > Manu Sporny - https://www.linkedin.com/in/manusporny/ > Founder/CEO - Digital Bazaar, Inc. > https://www.digitalbazaar.com/ > >
Received on Thursday, 8 January 2026 01:37:31 UTC