CR Request for Web of Things (WoT) Architecture 1.1

[sebastiankb]

Document title, URLs, estimated publication date

Web of Things (WoT) Architecture 1.1
Editor draft: https://w3c.github.io/wot-architecture/
Static CR snapshot: https://github.com/w3c/wot-architecture/blob/main/publication/ver11/3-cr/Overview.html
Publication as soon as possible after November 2 (actual date needs to be updated in document)

Abstract

The W3C Web of Things (WoT) enables interoperability across IoT platforms and application domains. The goal of the WoT is to preserve and complement existing IoT standards and solutions. The W3C WoT architecture is designed to describe what exists, and only prescribes new mechanisms when necessary.

This WoT Architecture specification describes the abstract architecture for the W3C Web of Things. This abstract architecture is based on requirements that were derived from use cases for multiple application domains. Several modular building blocks were identified whose detailed specifications are given in other documents. This document describes how these building blocks are related and work together. The WoT abstract architecture defines a basic conceptual framework that can be mapped onto a variety of concrete deployment scenarios, several examples of which are given. However, the abstract architecture described in this specification does not itself define concrete mechanisms or prescribe any concrete implementation.

Status

Status of the document (https://w3c.github.io/wot-architecture/#sotd

Link to group's decision to request transition

Resolution to request CR transition for Web of Things (WoT) Architecture 1.1 in WG call November 2.

Changes

Changes from the WD published September 7, 2022

• Modify Section 7, WoT Building Blocks so that it is informative.
• Add terminology entries for Profile, System, and Directory.
• Updates to affiliation of Matthias Kovatsch (as a former editor).
• Add/update references to the WoT Use Cases and Requirements [WOT-USE-CASES-REQUIREMENTS] document.

Requirements satisfied

Requirements laid out in the WG charter for this deliverable were satisfied.

Dependencies met (or not)

none

Wide Review

• Wide review was requested from Accessibility, Internationalization, Security, Privacy, and TAG and all issues raised addressed (although in some cases we have not yet gotten confirmation that the issues were addressed from the reviewers):

  • Web of Things (WoT) Architecture 1.1 w3ctag/design-reviews#736
  • Web of Things (WoT) Architecture 1.1 2022-05-03 > 2022-06-30 w3cping/privacy-request#86
  • Web of Things (WoT) Architecture 1.1 2022-05-03 > 2022-06-30 security-request#27
  • Web of Things (WoT) Architecture 1.1 2022-04-03 > 2022-06-30 a11y-request#23
  • Web of Things (WoT) Architecture 1.1 2022-04-03 > 2022-06-30 i18n-request#178

• The Societal Impact questionnaire has not yet been filled in but will be completed prior to PR.

Issues addressed

• General issue tracker: https://github.com/w3c/wot-architecture/issues
• Issues marked resolve by PR will be addressed prior to PR transition. These are editorial.
• All other open issues will be deferred to future work (e.g. in a new charter) or some closed (since issue was solved)

Formal Objections

None at present.

Implementation

A DRAFT implementation report is available at https://w3c.github.io/wot-architecture/testing/report11.html. This will be updated during the CR review period to address
at-risk items and add testimonials.

Patent disclosures

None.

[swickr]

We note that #809 is still open and this causes confusion. For example, what is the status of and relationship to wot-binding-templates? Is that a normative dependency? If that WG Note is a vocabulary definition then consider supporting it via a Registry.

It appears that the Security and Privacy review was done prior to the addition of Trusted Environment. Was another review done after these changes?

[mlagally]

@sebastiankb
Please fix the estimated publication date, it states Oct 26th which does not reflect the actual time line.

[sebastiankb]

@mlagally done

[mmccool]

@swickr regarding the following:

It appears that the Security and Privacy review was done prior to the addition of Trusted Environment. Was another review done after these changes?

I looked at the PR timeline and it seems only the formal definition of this term was added post-review to the Terminology section. The term however was already in use under the Security Considerations section for the version that was reviewed.

Here is the relevant PR: w3c/wot-architecture#781

So to resolve this we would like to ask someone to (ideally, quickly) review (just) the new definition, e.g. the above PR. How can we do that?

[swickr]

Thank you for pointing to w3c/wot-architecture#781 @mmccool. The full status of the security review is not clear but I concur that the trusted environment concept was present in the May draft.

[mmccool]

@swickr I also noticed that the issue calling for a security review is still open. It would be good to get formal closure on this including the above terminology definition. See the comment I added here: w3c/security-request#27 (comment)

[plehegar]

After checking with @samuelweiler , the security review questions have been resolved.

At this point, you may want to close #809 if you're done fixing the references.

Approved.

[plehegar]

https://www.w3.org/TR/2023/CR-wot-architecture11-20230119/