Blog
The W3C blog is for in-depth Web standards topics and educational materials. More information in About W3C Blog.
Browse categories
Browse archives
W3C, threat modeling, and the CRA: a report from GDC 2026
Published:
By: Giovanni Corti, from W3C Member Fondazione Bruno Kessler, participant of the W3C Security Interest Group (SING)
At GDC 2026, W3C Security Interest Group member Giovanni Corti shared how threat modeling was integrated into the revision of ETSI EN 304 617, the draft harmonized standard for browser cybersecurity under the EU Cyber Resilience Act, referencing the W3C Threat Modeling Guide and the Threat Model for the Web.
- gdc
W3C launches first pilot of program to support Open Source projects
In this blog post, Ian Jacobs, Strategy Team, introduces the first pilot of a program allowing Open Source projects to mature within an ecosystem seeking to build a coherent open platform through processes and IPR policies designed to support interoperability, quality, and W3C values.
- oss
- pilot
A compilation of W3C in Japan's 30th anniversary events
2026 marks the 30th anniversary of the establishment of W3C in Japan. As part of these commemorative activities, W3C Japan held an event for W3C members in May, an exhibition for the general public in June and an event early September for W3C members and the web developer community in Japan.
- anniversary
Making digital identity work across the web: GDC 2026
W3C Team and Members will present at Global Digital Collaboration Conference (GDC 26) which will bring together governments, standards organizations, open-source communities, the private sector, and civil society with a focus on digital identity and digital wallets
- gdc
WOFF 1.0: a milestone on W3C’s journey of fonts on the web
Published:
By: Chris Lilley
The anniversary of the first public release of Web Open Font Format (WOFF) is a very interesting historical milestone on the decades-long road of W3C’s work on fonts on the web.
Simplified task force enrollment and participant management
This blog post is about incremental improvements by W3C's IT/Systems Operations Team that puts task force participation management directly in the hands of participants and chairs.
Threat modeling age-based content restrictions: what we learned at EIC 2026
At the European Identity and Cloud Conference (EIC 2026) in Berlin, we explored how Threat Modeling with LEGO® SERIOUS PLAY® can help uncover security, privacy, and human-rights threats in age-based content restriction systems. Starting from an Issuer-Holder-Verifier model, participants built harms such as exclusion, surveillance, profiling, and correlation, then mapped them back to flows, actors, and assumptions. The exercise showed how compliance choices can become Web architecture.
CSS animations, human rights, and big accessibility at the AB Web Meetup
On 2 July 2026 , the W3C Advisory Board organised a meetup around the web and web standards. It featured three talks and had time to mingle.
- meetup
Improvements to how W3C Members manage employee participation in groups
This blog post is about incremental improvements by W3C's IT/Systems Operations Team to how W3C member representatives use the W3C website to nominate, change, and remove the people who participate in W3C groups on behalf of their organization.
International Women in Engineering Day spotlight: Carine Bournez, W3C
In this blog post we celebrate International Women in Engineering Day by interviewing Carine Bournez, W3C Principal and Team Contact who specializes in WebRTC, Web Performance, SVG and Data Shapes.
- Giving Tuesday
- INWED
