Re: Welcome to the Web NFC Community Group

Thank you, Anssi.

I'm part of the Google Chrome Security team and we are actively reviewing a
number of new Web APIs for mobile and desktop browsers.  The Web NFC API
has lots of interesting use cases, and I'd like to make sure we don't
expose users unnecessarily to privacy or security attacks, especially as
developers will use the API in unexpected (or not recommended) ways.  I've
posted an initial review, below, and would like to take another pass if
there are significant changes to the spec.  Thanks!

https://github.com/w3c/web-nfc/issues/22

 -- Nathan

On Tue, May 12, 2015 at 12:17 AM, Kostiainen, Anssi <
anssi.kostiainen@intel.com> wrote:

> Hi Nathan,
>
> Welcome to the Web NFC Community Group!
>
> I've understood you'd be interested in reviewing the security aspects of
> the Web NFC spec -- input that'd be much appreciated by the group. Please
> feel free to briefly introduce yourself, areas where you might want to
> contribute.
>
> As you know, this group will create a Near Field Communication API that is
> browser-friendly and adheres to the Web's security model. We believe that
> means the API will not expose full, low level NFC functionality, but rather
> a higher level subset that is safe for Web pages, protects user privacy,
> and does not annoy users with unnecessary or complex permission requests.
>
> Below I share with you some pointers to get you started in this group.
>
> From the group's home page [1] you can find relevant resources, namely:
>
> * Charter [2] defines the goals, scope, deliverables
> * GitHub [3] is where the spec and supporting documents live:
>  * Web NFC API [4]
>  * Use Cases [5]
>  * Security and Privacy Considerations [6]
> * public-web-nfc@w3.org mailing list archived at [7]
>
> If you haven't yet done so, please review the group's Charter and the Web
> NFC API spec.
>
> Note that the group's mailing list [7] is automatically informed of
> significant activity in GitHub [3]. The GitHub notifications sent to this
> list are prefixed with "[web-nfc]".
>
> Please feel free to open issues, add comments, submit pull requests in
> GitHub, and discuss any ideas on this mailing list.
>
> Looking forward to working with you. Please let me know if you have any
> questions.
>
> Thanks,
>
> -Anssi (CG chair)
>
> [1] https://www.w3.org/community/web-nfc/
> [2] https://w3c.github.io/web-nfc/charter/
> [3] https://github.com/w3c/web-nfc
> [4] http://w3c.github.io/web-nfc/
> [5] http://w3c.github.io/web-nfc/use-cases.html
> [6] http://w3c.github.io/web-nfc/security-privacy.html
> [7] https://lists.w3.org/Archives/Public/public-web-nfc/