Security, Privacy & Authenticity on the Web

on YouTube ↗22m

" summary

W3C publishes ethical web principles and a parallel set of privacy principles that require purpose specification, data minimization and machine‑readable privacy info; a W3C community group named SWAG (Secure Web Application Guidelines) publishes concrete developer best practices for CSP, fetch metadata and limiting third‑party scripts; Content Credentials (Content Credentials (C2PA)) is deployed in the wild (LinkedIn examples, Samsung S25 support) and C2PA spec v2.2 plus a conformance program exist; connected appliances demonstrate automatic security updates under CRA‑style expectations.

AI-written summary · about

" chapters (7)

1. 0:00Introduction
2. 3:12Web as global platform
3. 7:28Ethical web principles
4. 12:07Security implications
5. 15:56Web security best practices
6. 18:52Authenticity and verification
7. 20:42C2PA and content credentials

" related talks

• 18mWeb Developer Security: Best Practices & BeyondDaniel Appelquist · SOSS Community Day Europe 2024
• 32mSecurity-First Web AppsAtila Fassina · JSHeroes 2025
• 32mSAFE WG Intro – Jeyappragash J J, padme.io, & Ray Colline, GoogleJeyappragash J J, Ray Colline · KubeCon + CloudNativeCon Europe 2018
• 55mBeyond the origin - secure media provenance with C2PACharlie Halford · NDC Manchester 2025
• 47mD2T2 - Defense-in-Depth Techniques for Modern Web AppsM. Spagnuolo, L. Weichselbaum · Hack In The Box Amsterdam 2018
• 17mContent Security Policy: The application security Swiss Army KnifeScott Helme · dotSecurity 2016
• 32mWhat is CSP and Why Haven't You Applied it YetJoel Weinberger · AppSec California 2014
• 24mTowards a post-XSS world.Mike West · JSConf EU 2013