Re: CfC to publish Threat Modeling Guide as a First Public DraftNote < 2026-01-14 as a First Public Draft Interest Group Note < 2026-01-14

Dear Security Fellows,

Having received no objections, I am proceeding with the transition request.

Thank you,

Simone

> On 14 Jan 2026, at 16:30, Amir Sharif <asharif@fbk.eu> wrote:
> 
> Hi Simone, 
> 
> I support the publishing of the "Threat Modeling Guide". 
> 
> Kind regards, 
> Amir
> 
> On Wed, Jan 14, 2026 at 4:25 PM Tommaso Innocenti <innotommy@gmail.com> wrote:
> Hi Simone 
> thanks for your support and help throughout all the group’s initiatives.
> 
> I support the publishing of the "Threat Modeling Guide”
> 
> Best regards
> Tommaso innocenti
> 
> 
> 
> On Thu, Jan 8, 2026 at 8:27 AM Patrick Schaller <patrick.schaller@inf.ethz.ch> wrote:
> Hey Simone,
> 
> Thank you for your work and commitment!
> 
> I support the publishing of the "Threat Modeling Guide”.
> 
> Best,
> Patrick
> 
> On 06.01.2026 17:36, Simone Onofri wrote:
> > Dear Group,
> >
> > This is a Call for Consensus (CfC) for the Group publishing the “Threat Modeling Guide” and for enabling autopublish.
> >
> > [[
> > This document describes when, why, and how to perform threat modeling during the development of a specification at the World Wide Web Consortium (W3C). This is designed to help standards developers understand threats and countermeasures from the beginning of standard development and to document the model in the security considerations section.
> > ]]
> >
> > During the 2026-01-06 meeting, the participants had already agreed. To ensure everyone has an opportunity to weigh in, this will serve as a record of the group's decision, one way or another.
> >
> > The deliverable is available for inspection here:
> >
> > https://w3c.github.io/threat-modeling-guide/
> >
> > In response, please state one of the following:
> >
> > * I support the publishing of the "Threat Modeling Guide”..
> > * I do not support the publishing of the "Threat Modeling Guide”, but it's fine if we decide to proceed
> > * I object to the adoption of the "Threat Modeling Guide” due to Issues filed in the open issue <#number> of the securityig repository
> >
> > If there are no further objections, we will confirm the decision by February 21, 2025, at midnight Pacific time.
> >
> > Just so you know, if the deliverable is published, it will be marked as a First Group Note Draft, which does not imply W3C endorsement.
> >
> > Please respond by 2026-01-14; at that point, this CfC will be closed.
> >
> > Thank you,
> >
> > Simone
> >
> 
> 
> 
> -- 
> Amir Sharif
> Researcher
> Security and Trust Research Unit
> Cybersecurity Center
> Fondazione Bruno Kessler, Trento, Italy
> personal page:https://st.fbk.eu/people/amir-sharif  FBK web: www.fbk.eu
> Cybersecurity center web: www.cs.fbk..eu
> Security &Trust web: st.fbk.eu
> 
>   
> 
> --
> Le informazioni contenute nella presente comunicazione sono di natura privata e come tali sono da considerarsi riservate ed indirizzate esclusivamente ai destinatari indicati e per le finalità strettamente legate al relativo contenuto. Se avete ricevuto questo messaggio per errore, vi preghiamo di eliminarlo e di inviare una comunicazione all’indirizzo e-mail del mittente.
> --
> The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. If you received this in error, please contact the sender and delete the material..

Received on Thursday, 15 January 2026 10:30:41 UTC