BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Sabre//Sabre VObject 4.5.8//EN
CALSCALE:GREGORIAN
LAST-MODIFIED:20260219T070113Z
BEGIN:VTIMEZONE
TZID:Asia/Tokyo
X-MICROSOFT-CDO-TZID:20
BEGIN:STANDARD
DTSTART:20241117T010000
TZOFFSETFROM:+0900
TZOFFSETTO:+0900
TZNAME:JST
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
UID:fb95b528-abb3-44cd-a0b5-7e67c084fced
DTSTAMP:20260219T070113Z
SUMMARY:Agentic Browsing and the Web's Security Model
DTSTART;TZID=Asia/Tokyo:20251112T100000
DTEND;TZID=Asia/Tokyo:20251112T110000
DESCRIPTION:https://www.w3.org/events/meetings/fb95b528-abb3-44cd-a0b5-7e67
 c084fced/\n\nVarious browser implementers have announced plans to ship age
 ntic browsing experiences\, i.e. AI-powered features that take action on w
 ebsites on the user's behalf. ([1](https://www.perplexity.ai/comet)\, [2](
 https://brave.com/blog/leo-roadmap-2025-update/)\, [3](https://www.operane
 on.com/)\, [4](https://www.microsoft.com/en-us/edge/ai-powered/copilot-mod
 e)\, [5](https://blog.google/products/chrome/new-ai-features-for-chrome/)\
 , [6](https://www.anthropic.com/news/claude-for-chrome)\, [7](https://deep
 mind.google/models/project-mariner/)\, etc.)\n\nThese exciting new capabil
 ities also come with new security challenges through the exposure of LLMs 
 to untrusted web content and their ability to access the user's private in
 formation and take action on their behalf (a case of [lethal trifecta](htt
 ps://simonwillison.net/2025/Jun/16/the-lethal-trifecta/)).\n\nWe'll examin
 e how the new possibility of [prompt injected](https://en.wikipedia.org/wi
 ki/Prompt_injection) user agents impacts the Web's security model and disc
 uss how browser and agent implementers\, web developers and other ecosyste
 m participants can design a safe agentic browsing experience for the Web P
 latform.\n\n**Goal(s):**\nBrainstorming and knowledge sharing\n\nAgenda\n\
 n**Materials:**\n- [Session proposal on GitHub](https://github.com/w3c/tpa
 c2025-breakouts/issues/25)
STATUS:CONFIRMED
CREATED:20251028T073644Z
LAST-MODIFIED:20260219T070113Z
SEQUENCE:5
ORGANIZER;CN=W3C Calendar;PARTSTAT=ACCEPTED;ROLE=NON-PARTICIPANT:mailto:nor
 eply@w3.org
LOCATION:Floor 4 - 401
CATEGORIES:TPAC 2025,Breakout Sessions
END:VEVENT
END:VCALENDAR