ACTION-662: Redraft proposed product page on API Minimization

Hi all,

since Dan has left the TAG, I've taken over the work on API Minimization. As a first step, I've updated the product page to reflect what I have in mind for the finding. You can read that at:

    http://www.w3.org/2001/tag/products/apiminimization-2012-02-02.html

If there is consensus that this is a good way forward, I'll copy it to the default undated product page.

The changes that I made essentially focus on broadening the scope of this work to encompass "Privacy by Design in APIs". The reason I did so is that it is difficult to speak only of minimisation without introducing the broader issues with privacy in API design, and if I'm going to introduce them I might as well include a discussion of how to avoid or mitigate them.

I don't think that this broadening of scope leads to a much more complex or longer finding. The primary addition that is needed has to do with fingerprinting and techniques that have been used in several API groups to defend against it. I expect a draft finding to stay on track for review by the TAG's next f2f in April.

Feedback much welcome!

-- 
Robin Berjon - http://berjon.com/ - @robinberjon

Received on Thursday, 2 February 2012 18:38:09 UTC