Vision for W3C

Web Security

Security Threats	System-level thinking
Data breaches (Yahoo! massive breach, 2016) Ransomware attacks (San Francisco MTA, 2016) Industrial IoT hacking (Mirai malware DDoS on Dyn, 2016)	System-level thinking required to provide end-to-end solution:

How are we securing the Web?

• Build security in WebApps:
  • WebCrypto API
• Kill the password:
  • Webauthn
• Cooperative Policy enforcement in browsers:
  • Content Security Policy (CSP)
• Secure Web apps; security built in specs & implementations:
  • HTTPS upgrade
  • Security & Privacy Considerations
• See the Roadmap of Security Technologies for the Web

Real-Time Communications

• WebRTC brings real-time Audio Video communications to the Web:
  • for general communications
  • used by Telcos
• Promising interaction with WebVR
• Presence + deeper integration (Service Workers)
• WebRTC expected to reach CR in 2017Q2

The era of 5G

• 5G (2020-2022) - higher bandwidth, less latency, wider coverage
• Applications: IoT (sensors), connected car, Entertainment, VR/AR

The Web Stack in an era of network evolutions

• Network evolution:
  • Multi-Access Edge Computing, QUIC, LPWAN, 5G are reshaping networks
• Aim: Improve higher layer Web stack so that 5G Performance advantage gets through to applications.
• Opportunities:
  • Network impact on performance
  • Adapting network and measurement APIs
• Talk to Dom if interested.

Rationale for W3C/IDPF combination

• Web will improve
  • Screens, typography, layout
• Web will add value
  • Links will raise asset value exponentially
  • Data will power journalism; curation
  • Rich media will enhance digital publications, news, education
• Web will spur business model innovation
  • Many eBooks will become (mobile) apps; ads insertion
• Publishing will reconcile the Web's original concept of a gigantic library of… publications

Packaged Web Publications

• Many applications would benefit from the notion of a "Web Publication"
• EPUB and PWP contents are functionally identical
  • Based on W3C standards (HTML, CSS, SVG, etc.)
  • Content (HTML, SVG, MathML) + administrative files (manifest, metadata) + auxiliary files (PNG, CSS, JS) = packaged portable format
• WAI-ARIA for accessibility structure and semantics
• Zero separation between online and offline
  • One PWP, several ‘states’
• See also: Publishing
  (Rick Johnson, VitalSource | Ingram Content Group)

e-Commerce: at first was merchant centric

• 24-hour online global presence
• Push-only info through Web sites, email
• Online distinct from in-store
• Few online payment methods
• Home delivery and in-store returns
• No real digital coupons

e-Commerce: today the customer is in charge

• Buy based on social network recommendations and reviews
• Mobile devices give information anywhere, including in-store
• Online and in-store converging
• Greater choice of payment methods
• In-store pickup, free shipping programs
• Loyalty programs, digital coupons

e-Commerce: how merchants and Web are adapting

• Web intended to enable humanity to connect and communicate
  • Powerful enough for 1.5 trillion USD of e-Commerce annually
• Web was not designed as an e-Commerce platform
• Evolving expectations driving new requirements:

Customer Experience	Security & Privacy

Web Payments at W3C

• Streamlining check-out (Web Payments Working Group)
  • Flow
    • Payment Request API (+ "push payments") (CR 2017Q2)
    • Payment Handler API (FPWD April 2017)
  • Payment Methods
    • Tokenized payments; Credit Transfers
• Exploration (Web Payments Interest Group)
  • Digital offers, receipts, automotive use cases, improved payment security, understanding of rules and regulation

Entertainment: a dynamic landscape

Key platform enhancements for media

Entertainment: This is only the beginning

• HDR / Wide-gamut on the Web
• Baseline of the Web supported across devices
• Cloud Browsers
• WebVR (API to expose Head-Mounted Displays to Web applications)
• GPU for the Web (API to expose graphic cards' 3D graphics and computation capabilities)

The Web of Things approach

Smart Everything

Open standard-based platform Automotive system

Connected cars

• W3C Automotive Working Group: delivering a service specification to expose vehicle signals to applications (HTML5, QT and headless) running on the vehicle and interacting with the Web.
• Auto WebPlatform Business Group:
  • Location Based services and Media.
  • Exploring applying Web Payments to connected vehicles with the Web Payments Interest Group
• Volkswagen Group joined W3C and submitted specifications for handling Media, Vehicle Signals and also willing to contribute towards Location Based Services and Notifications.