[saag] Re: W3C status for SAAG

Hi Deb,

Thanks for sharing this. I reviewed the Cryptography Usage in Web Standards document and shared my comments with the W3C
https://github.com/w3c/security-guidelines-cryptography/issues/15

Another W3C document that might be of interest to many SAAG members is "Modern Algorithms in the Web Cryptography API". This was previously discussed in JOSE. There is already a PR to add TurboSHAKE and KangarooTwelve, as specified in RFC 9861, which CFRG published just last month. It’s great to see RFC 9861 published, and I hope both TurboSHAKE and the standard SHAKE algorithms see widespread adoption in the future.
https://github.com/WICG/webcrypto-modern-algos/pull/41/files
https://www.rfc-editor.org/rfc/rfc9861.html

Cheers,
John

From: Deb Cooley <[email protected]>
Date: Friday, 21 November 2025 at 18:46
To: IETF SAAG <[email protected]>
Subject: [saag] W3C status for SAAG

There were three items that Simone asked me to pass along to SAAG.  Here is the email w/ links to some of the work:

# XML-Sig

I’ve seen that Donald Eastlake is on-site regarding the XML Signature update. I’ll try to talk to him this week.

# Cryptography usage in Web Standards

This is a new document we're working on, along the lines of a similar IETF document, to guide the use of encryption in web standards. Feel free to open issues on it:

https://w3c.github.io/security-guidelines-cryptography/


# Human Rights

We talked about this with the IAB. The issue is integrating the threat modeling process in a way that makes it easy for authors/editors to understand the social impacts of a standard.

https://www.w3.org/2025/Talks/human-rights-standards-iab-simone.pdf

Deb

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]