w3c/wot-security issues and pull requests

#235 - Feedback on section 3.2 Threat Model

Issue - State: open - Opened by simoneonofri 9 months ago - 2 comments

#234 - Cleanup (to be broken into smaller issues)

Issue - State: open - Opened by mmccool 10 months ago - 1 comment

#233 - Add Considerations survey

Pull Request - State: closed - Opened by mmccool 10 months ago

#232 - changed requirement section to analysis

Pull Request - State: closed - Opened by mahdanoura about 1 year ago

#231 - Wot-sec ontology

Issue - State: open - Opened by mahdanoura about 1 year ago - 1 comment

#230 - Remove rawgit links from README

Pull Request - State: closed - Opened by JKRhb about 1 year ago

#229 - Rename Requirements section to Analysis #213

Pull Request - State: closed - Opened by mahdanoura about 1 year ago - 1 comment

#228 - IoT-Cloud Integration Threat Analysis

Issue - State: open - Opened by mmccool about 1 year ago

#227 - Create Survey.md

Pull Request - State: closed - Opened by mmccool about 1 year ago

#226 - Migrate to new ReSpec profile

Pull Request - State: closed - Opened by mmccool over 1 year ago

#225 - Add DDoS Threats

Pull Request - State: closed - Opened by mmccool over 1 year ago

#224 - Add anchors to threats

Pull Request - State: closed - Opened by mmccool over 1 year ago - 2 comments

#223 - Fix ReSpec warning

Issue - State: closed - Opened by mmccool over 1 year ago - 1 comment

#222 - Create Anchors for Threats

Issue - State: closed - Opened by mmccool over 1 year ago - 3 comments

#221 - DDoS is not listed as a Threat

Issue - State: closed - Opened by mmccool over 1 year ago - 1 comment

#220 - [Discuss] Consider moving Terminology to the beginning

Issue - State: open - Opened by mmccool over 1 year ago

#219 - Fix OSCORE reference

Pull Request - State: closed - Opened by JKRhb over 1 year ago

#218 - Remove Editor's note on RFC references

Pull Request - State: closed - Opened by JKRhb over 1 year ago

#217 - Expand introduction section

Pull Request - State: closed - Opened by JKRhb almost 2 years ago - 3 comments

#216 - Update IETF references, clean up whitespace

Pull Request - State: closed - Opened by JKRhb almost 2 years ago - 1 comment

#215 - Revise abstract

Issue - State: open - Opened by mmccool almost 2 years ago - 1 comment

#214 - Expand the (currently very short) intro section

Issue - State: closed - Opened by mmccool almost 2 years ago - 1 comment
Labels: Propose Closing

#213 - Rename "Requirements" section to "Analysis"

Issue - State: closed - Opened by mmccool almost 2 years ago

#212 - Add DDoS threat

Issue - State: closed - Opened by mmccool almost 2 years ago - 1 comment

#211 - Mention new deliverables

Issue - State: open - Opened by mmccool almost 2 years ago

#210 - Proposed Changes for 2023 Update

Pull Request - State: closed - Opened by mmccool almost 2 years ago - 1 comment

#209 - Updates to "Security and Privacy Guidelines" (omnibus)

Issue - State: closed - Opened by mmccool over 2 years ago - 11 comments

#208 - Remove Reference to "Security Best Practices"

Issue - State: open - Opened by mmccool over 2 years ago

#206 - Add and Update Cloud References

Issue - State: open - Opened by mmccool over 2 years ago - 8 comments

#204 - Review Security Architecture of Home Assistant

Issue - State: closed - Opened by mmccool almost 3 years ago - 2 comments

#202 - Reference terminology section of the architecture spec

Issue - State: closed - Opened by mlagally about 3 years ago - 1 comment

#201 - Scripting related topics

Issue - State: open - Opened by zolkis over 3 years ago - 2 comments

#200 - Move away from rawgit

Issue - State: closed - Opened by Citrullin over 3 years ago

#199 - Add crypto hardware survey in /background

Pull Request - State: closed - Opened by Citrullin almost 4 years ago - 1 comment

#198 - Update hubs.md with OpenHABs content

Pull Request - State: closed - Opened by mmccool almost 4 years ago

#197 - Promoting an approach where every thing is a server is a security nightmare

Issue - State: open - Opened by hspaay almost 4 years ago - 8 comments
Labels: Architecture, Consideration

#196 - Update security and privacy considerations in Discovery

Issue - State: closed - Opened by mmccool about 4 years ago - 11 comments
Labels: Discovery

#195 - Consider specific security guidance for particular contexts

Issue - State: open - Opened by mmccool about 4 years ago - 2 comments
Labels: Architecture

#194 - Provide guidance on use of OAuth 2 flows

Issue - State: closed - Opened by mmccool about 4 years ago - 5 comments

#193 - Consider making order meaningful in "oneOf" combo scheme

Issue - State: open - Opened by mmccool about 4 years ago - 1 comment

#192 - Review updated Lifecycle in Architecture

Issue - State: open - Opened by mmccool about 4 years ago - 5 comments
Labels: Architecture

#191 - Review security architecture of Home Assistant

Issue - State: closed - Opened by relu91 about 4 years ago - 5 comments
Labels: Hubs

#190 - Add explicit discussion of "Trust levels" for different consumers

Issue - State: open - Opened by mmccool about 4 years ago

#189 - Review security architecture of ThingSpeak hub

Issue - State: open - Opened by mmccool about 4 years ago - 2 comments
Labels: Hubs

#188 - Review security architecture of Mozilla WebThings gateway

Issue - State: open - Opened by mmccool about 4 years ago - 2 comments
Labels: Hubs

#187 - Review security architecture of OpenHAB

Issue - State: open - Opened by mmccool about 4 years ago - 4 comments
Labels: Hubs

#186 - Discuss monitoring requirements

Issue - State: open - Opened by mmccool about 4 years ago

#185 - Consider how to support object security

Issue - State: open - Opened by mmccool about 4 years ago - 6 comments

#184 - Review security support in node-wot

Issue - State: open - Opened by mmccool about 4 years ago - 2 comments

#183 - Consider adding logging/auditing discussion

Issue - State: open - Opened by mmccool about 4 years ago

#182 - Consider making a WoT Security and Privacy Template

Issue - State: open - Opened by mmccool about 4 years ago

#181 - Reconsider mandatory items in OAuth2

Issue - State: open - Opened by mmccool about 4 years ago - 2 comments
Labels: DEFERRED

#180 - Review EdgeX Security Architecture and align with it

Issue - State: open - Opened by mmccool over 4 years ago - 1 comment
Labels: Hubs

#179 - Prepare to delete Working branch - update README

Pull Request - State: closed - Opened by mmccool over 4 years ago

#178 - Prepare to delete working branch

Pull Request - State: closed - Opened by mmccool over 4 years ago - 1 comment

#177 - Review oAuth2.0 use case

Issue - State: closed - Opened by relu91 over 4 years ago - 2 comments
Labels: Consider closing

#176 - Changes for Issue #144: references/text

Pull Request - State: closed - Opened by OliverPfaff over 4 years ago - 1 comment

#175 - Additions and (minor) changes for Issue #144

Pull Request - State: closed - Opened by OliverPfaff over 4 years ago - 1 comment

#174 - Merge Working into Master

Pull Request - State: closed - Opened by mmccool over 4 years ago - 1 comment

#173 - Consider OAuth2 "device" flow

Issue - State: closed - Opened by mmccool over 4 years ago - 3 comments
Labels: Consider closing

#172 - Issue #144: text proposal for end-to-end security

Pull Request - State: closed - Opened by OliverPfaff over 4 years ago

#171 - Testing only

Pull Request - State: closed - Opened by OliverPfaff over 4 years ago - 1 comment

#170 - Review Conexxus Security and Privacy Threat Model and Implementation Recommendations

Issue - State: closed - Opened by mmccool over 4 years ago - 7 comments
Labels: Consider closing

#169 - Security review of Lifecycle model and diagram

Issue - State: closed - Opened by mlagally over 4 years ago - 17 comments
Labels: Consider closing

#168 - Add "Security and Privacy Considerations" to all use cases (or requirements)

Issue - State: open - Opened by mmccool over 4 years ago - 7 comments

#167 - Review Scripting API to ensure Security configuration is supported

Issue - State: open - Opened by mmccool over 4 years ago - 2 comments

#166 - Add integrity protection (proof section) to TDs

Issue - State: open - Opened by mmccool over 4 years ago - 15 comments
Labels: PR Available, JSON-LD, DID

#165 - Re-introduce OAuth2 Security Scheme to TD

Issue - State: closed - Opened by mmccool over 4 years ago - 4 comments

#164 - Elaborated text on end-to-end security

Pull Request - State: closed - Opened by OliverPfaff over 4 years ago - 2 comments

#163 - Update Master to Working

Pull Request - State: closed - Opened by mmccool over 4 years ago

#162 - Working Branch Update and Repo Reorg

Pull Request - State: closed - Opened by mmccool over 4 years ago

#161 - Consider using DIDs to refer to public keys and authentication

Issue - State: open - Opened by mmccool over 4 years ago - 2 comments
Labels: DID

#160 - Scripting API for Discovery should Mitigate location fingerprinting

Issue - State: closed - Opened by mmccool almost 5 years ago - 5 comments
Labels: Discovery

#159 - Made a text proposal for E2E security

Pull Request - State: closed - Opened by OliverPfaff almost 5 years ago - 4 comments

#153 - Review IETF MUD draft specification and consider WoT alignment

Issue - State: open - Opened by mmccool almost 5 years ago - 3 comments
Labels: DEFERRED

#152 - Review PING's Privacy Threat Model draft

Issue - State: open - Opened by mmccool almost 5 years ago - 5 comments
Labels: PING

#151 - Align stakeholders with architecture

Issue - State: open - Opened by mlagally almost 5 years ago - 5 comments
Labels: WIP

#149 - Add SDO (Secure Device Onboard) Reference

Issue - State: closed - Opened by mmccool about 5 years ago - 4 comments
Labels: WIP, PR Available

#148 - "Thing authentication" appears fuzzy

Issue - State: open - Opened by OliverPfaff about 5 years ago - 14 comments
Labels: Issue in Arch

#147 - Discuss IETF Anima

Issue - State: open - Opened by OliverPfaff about 5 years ago - 6 comments
Labels: WIP, PR Available

#146 - Misleading reference [IETFACE]

Issue - State: closed - Opened by OliverPfaff about 5 years ago - 6 comments
Labels: WIP

#144 - Concept of "end-to-end security"

Issue - State: open - Opened by OliverPfaff about 5 years ago - 9 comments
Labels: Issue in Arch

#143 - Definition of the notion "Privacy"

Issue - State: open - Opened by OliverPfaff about 5 years ago - 3 comments
Labels: PING

#142 - Avoid "HTTP(S)"/"HTTPS" and others in this cohort

Issue - State: closed - Opened by OliverPfaff about 5 years ago - 4 comments

#138 - Review Lifecycle model

Issue - State: closed - Opened by mlagally over 5 years ago - 5 comments
Labels: WIP

#135 - Clarify that an Update System is Necessary for Security

Issue - State: open - Opened by mmccool over 5 years ago - 1 comment

#123 - Terminology inconsistency - Proxy and Gateway are used interchangeably.

Issue - State: open - Opened by takuki almost 6 years ago - 7 comments

#112 - Polish English

Pull Request - State: closed - Opened by mmccool over 6 years ago - 2 comments

#92 - Tunnel configuration

Pull Request - State: closed - Opened by mmccool over 6 years ago - 5 comments

#66 - Role of Platforms in WoT

Issue - State: open - Opened by jasonanovak almost 7 years ago - 5 comments
Labels: Hubs, Platforms

#65 - Consider moving Thing lifecycle discussion to Architecture

Issue - State: open - Opened by mmccool almost 7 years ago - 3 comments

#57 - add w3cid to Elena and McCool

Pull Request - State: closed - Opened by ashimura almost 7 years ago

#37 - New subsection on HTTP & WebSockets

Pull Request - State: closed - Opened by draggett about 7 years ago - 6 comments

#33 - remove redundant threat model

Pull Request - State: closed - Opened by mmccool about 7 years ago

#30 - Initial content for "Existing Best Practices" section

Pull Request - State: closed - Opened by mmccool about 7 years ago - 3 comments

#27 - Fix table formatting for threat model

Pull Request - State: closed - Opened by mmccool about 7 years ago - 1 comment

#26 - Clean up abstract

Pull Request - State: closed - Opened by mmccool about 7 years ago - 2 comments

#24 - Remove redundant markdown threat model

Pull Request - State: closed - Opened by mmccool about 7 years ago - 1 comment

#11 - Add Elena Reshetova as Editor

Pull Request - State: closed - Opened by mmccool about 7 years ago - 1 comment

#10 - Convert MD files to HTML in index

Pull Request - State: closed - Opened by mmccool about 7 years ago

GitHub / w3c/wot-security issues and pull requests