Security Interest Group Plenary Call

• Upcoming
• Confirmed

Security Interest Group plenary call for coordinating W3C security reviews, threat-modeling work, Security IG deliverables, cross-group coordination, and recurring group administrivia.

Agenda

 View agenda

• Security Topics / Threat Models

  • WebMCP Threat Model: hands-on session. We'll start with "What are we building?" with a preview of the technology, use cases, alternatives, and a diagram from Dominic, Julia, and Johann. If there is time, we'll move to "What can go wrong?" using, e.g., STRIDE per element.
  • Pre-reading material for understanding that WebMCP != MCP :)
    • Specification (with Security and Privacy):
      • https://webmachinelearning.github.io/webmcp/
    • Explainer / README / Architecture notes:
      • https://raw.githubusercontent.com/webmachinelearning/webmcp/refs/heads/main/README.md
    • Related implementation guidance:
      • https://developer.chrome.com/docs/ai/webmcp/secure-tools
      • https://developer.chrome.com/docs/agents/security
    • Related attacks:
      • https://www.earlence.com/blog.html#/post/webmcp-sameorigin

• Community / coordination

  • TPAC 2026: tentative SING session at TPAC for 26–30 October 2026, 09:45–12:45 Greenwich Mean Time: https://www.w3.org/events/meetings/55de4fc7-0581-48cd-b05a-d0700665ec6c/

Joining instructions

Instructions are restricted to W3C users with Member access . You need to log in to see them.

Export options

Personal links

Please log in to export this event with all the information you have access to.

Public links

The following links do not contain any sensitive information and can be shared publicly.

• Download this event as ics
• Download all events in the series as ics