W3C Open Day - W3C CEO Presentation

Web Security

Security Threats	System-level thinking
Data breaches (Yahoo! massive breach, 2016) Ransomware attacks (San Francisco MTA, 2016) Industrial IoT hacking (Mirai malware DDoS on Dyn, 2016)	System-level thinking required to provide end-to-end solution:

How are we securing the Web?

• Build security in WebApps
  • WebCrypto API
• Kill the password
  • Webauthn
• Cooperative Policy enforcement in browsers:
  • Content Security Policy (CSP)
• Secure Web apps; security built in specs & implementations
  • HTTPS upgrade
  • Security & Privacy Considerations
• See the Roadmap of Security Technologies for the Web
• Later today: Security [@slides@] (Judy Zhu, Alibaba)

e-Commerce: today the customer is in charge

• Buy based on social network recommendations and reviews
• Mobile devices give information anywhere, including in-store
• Online and in-store converging
• Greater choice of payment methods
• In-store pickup, free shipping programs
• Loyalty programs, digital coupons

Web Payments at W3C

• Streamlining check-out (Web Payments Working Group)
  • Flow
    • Payment Request API (+ "push payments") (CR 2017Q2)
    • Payment Handler API (FPWD April 2017)
  • Payment Methods
    • Tokenized payments; Credit Transfers
• Exploration (Web Payments Interest Group)
  • Digital offers, receipts, automotive use cases, improved payment security, understanding of rules and regulation
• Later: Panel on payments in China

Entertainment: This is only the beginning

• HDR / Wide-gamut on the Web
• Baseline of the Web supported across devices
• Cloud Browsers
• WebVR (API to expose Head-Mounted Displays to Web applications)
• GPU for the Web (API to expose graphic cards' 3D graphics and computation capabilities)

Open standard-based platform Automotive system

Connected cars

• W3C Automotive Working Group: delivering a service specification to expose vehicle signals to applications (HTML5, QT and headless) running on the vehicle and interacting with the Web.
• Auto WebPlatform Business Group:
  • Location Based services and Media.
  • Exploring applying Web Payments to connected vehicles with the Web Payments Interest Group
• Volkswagen Group joined W3C and submitted specifications for handling Media, Vehicle Signals and also willing to contribute towards Location Based Services and Notifications.
• Later: Automotive [@slides@] (Peng Yun, Baidu)

Participation (as of 17 April)

(1) Courses’ enrolled students (W3DevCampus and W3Cx)