Work Item: Threat Model for the Web (TMW)

[simoneonofri]

As specified in the charter, described in the Threat Modeling Guide (TMG), and in line with the motto “Threat Model all things” one of the group's deliverables is the Threat Model for the Web, which aims to help develop secure standards and understand whether there are other threats related to the Web Platform that need to be addressed.
We are currently working on several fronts, inside the TMG and there are also:

• Bilgiography
• Notes

[cc'ing @jandrieu]

[TomCJones]

“Threat Model all things” - ok, but the web isn't a thing. I believe that we can only threat model entities = objects with an ID

[simoneonofri]

Hi @TomCJones, yes, Web is not a thing. The phrase was a reference to a presentation i did.