Security for Access to Device APIs from the Web - W3C Workshop 10-11 December 2008, London

Call For Participation

As the Web becomes an ubiquitous development platform, application developers need to get access to the features available on the computers or devices on which their Web application (through a browser or through a widget) is running.

With the emergence of the Web as a compelling alternative to locally installed applications, security issues are an increasing obstacle for realizing the full potential of the Web, in particular when Web applications developers need to get access to features not traditionally available in the browsing environment: cameras, GPS systems, connectivity and battery levels, external applications launch, access to personal data (e.g. calendar or addressbook), etc.

The goal of this workshop is to bring together people from a wide variety of backgrounds (API designers, security experts, usability experts, ...) to discuss the security challenges involved in allowing Web applications and widgets to access the APIs that allow to control these features, and to advise the W3C on appropriate next steps for any gap that needs to be addressed with new technical work.


Topics that might serve as appropriate discussion points for position papers include, but are not limited to:

We expect the discussions at this workshop to be relevant to the following Working Groups:

Requirements for Participation

Expression of Interest

To help the organizers plan the workshop: If you wish to participate, please as soon as possible send a message to with a short (one paragraph) "expression of interest" stating:

Note: Sending that expression of interest does not mean that you registered for the workshop. It is still necessary to send a position paper (see below), which then must be considered for acceptance by the Program Committee.

Position Papers

You paper submitted to must meet the following criteria:

Based on a review of all submitted position papers, the Program Committee will select the most relevant and invite the submitters of those papers to the Workshop. From among all accepted papers, the program committee will choose a small number of papers judged most appropriate for fostering discussion, and ask the authors of those papers to give short presentations about them at the Workshop. After the workshop, those presentations will then be published on the workshop home page.

Important dates

Date Event
September 30 Call for Participation issued
30 October Deadline for position papers
5 November Extended Deadline for position papers following an expression of interest
17 November Acceptance notification sent
20 November Program released
25 November Deadline for Registration
10-11 December Workshop

Workshop Organization

Workshop sessions and documents will be in English.

Nick Allott, OMTP
Thomas Roessler, W3C

Program Committee


The Workshop will be hosted by Vodafone, in their London offices.


Position papers, agenda, accepted presentations, and report will also be published online.