Web of Things (WoT) Security and Privacy

General information about the Web of Things can be found on https://www.w3.org/WoT/.

This is the github repository for the W3C Web of Things Security and Privacy Task Force, and is used to manage cross-cutting security and privacy considerations.

• References: List of both normative and informative source material.
• Survey of Considerations: List of security and privacy considerations in other deliverables.
• WoT Security and Privacy Guidelines: A unified set of informative recommendations for security and privacy in a Web of Things system. Includes a threat model.
  • The latest stable version can be found here.
  • A "rendered" form of the latest stable version can be found here. This compiles out the complex JavaScript implementing the ReSpec system, making it faster to view and more compatible with a wider range of browsers. However, there may a small delay before it gets updated when the master changes.
• You may also be interested in the WoT Security Best Practices document. The Guidelines describe general principles and establish foundational definitions. The Best Practices document provides specific recommendatons for building and testing systems with current technology.

Older material has been moved to an archive subdirectory. This material has mostly already been incorporated into the main guidelines or best-practices documents.