Re: CfC to publish Threat Modeling Guide as a First Public DraftNote < 2026-01-14 as a First Public Draft Interest Group Note < 2026-01-14

Ciao Simone,

I support the publishing of the "Threat Modeling Guide”. Thank you for the
hard work.

Best,

Giovanni

Il giorno mar 6 gen 2026 alle ore 17:37 Simone Onofri <
simone_at_w3.org_gcorti@duck.com> ha scritto:

> Dear Group,
>
> This is a Call for Consensus (CfC) for the Group publishing the “Threat
> Modeling Guide” and for enabling autopublish.
>
> [[
> This document describes when, why, and how to perform threat modeling
> during the development of a specification at the World Wide Web Consortium
> (W3C). This is designed to help standards developers understand threats and
> countermeasures from the beginning of standard development and to document
> the model in the security considerations section.
> ]]
>
> During the 2026-01-06 meeting, the participants had already agreed. To
> ensure everyone has an opportunity to weigh in, this will serve as a record
> of the group's decision, one way or another.
>
> The deliverable is available for inspection here:
>
> https://w3c.github.io/threat-modeling-guide/
>
> In response, please state one of the following:
>
> * I support the publishing of the "Threat Modeling Guide”.
> * I do not support the publishing of the "Threat Modeling Guide”, but it's
> fine if we decide to proceed
> * I object to the adoption of the "Threat Modeling Guide” due to Issues
> filed in the open issue <#number> of the securityig repository
>
> If there are no further objections, we will confirm the decision by
> February 21, 2025, at midnight Pacific time.
>
> Just so you know, if the deliverable is published, it will be marked as a
> First Group Note Draft, which does not imply W3C endorsement.
>
> Please respond by 2026-01-14; at that point, this CfC will be closed.
>
> Thank you,
>
> Simone
>
>