Link to DTI's data portability threat model. (#426)

jyasskin · github-actions[bot] · jyasskin · commit 5db3daae0ac6 · 2024-07-06T19:12:37.000Z
SHA: 0889270 Reason: push, by torgo Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
diff --git a/index.html b/index.html
@@ -569,6 +569,15 @@
       "publisher": "The Conversationalist",
       "rawDate": "2019-09-13"
     },
+    "Portability-Threat-Model": {
+      "title": "User Data Portability Threat Model",
+      "authors": [
+        "Lisa Dusseault"
+      ],
+      "href": "https://dtinit.org/assets/ThreatModel.pdf",
+      "publisher": "Data Transfer Initiative",
+      "id": "portability-threat-model"
+    },
     "Privacy-Behavior": {
       "title": "Privacy and Human Behavior in the Age of Information",
       "authors": [
@@ -769,15 +778,15 @@
       "id": "web-without-3p-cookies"
     }
   },
-  "publishISODate": "2024-07-03T00:00:00.000Z",
-  "generatedSubtitle": "W3C Editor's Draft 03 July 2024"
+  "publishISODate": "2024-07-06T00:00:00.000Z",
+  "generatedSubtitle": "W3C Editor's Draft 06 July 2024"
 }</script>
 <link rel="stylesheet" href="https://www.w3.org/StyleSheets/TR/2021/W3C-ED"></head>
 <body data-cite="html indexedDB service-workers fingerprinting-guidance url infra" class="h-entry informative"><div class="head">
     <p class="logos"><a class="logo" href="https://www.w3.org/"><img crossorigin="" alt="W3C" height="48" src="https://www.w3.org/StyleSheets/TR/2021/logos/W3C" width="72">
   </a></p>
     <h1 id="title" class="title">Privacy Principles</h1> 
-    <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">W3C Editor's Draft</a> <time class="dt-published" datetime="2024-07-03">03 July 2024</time></p>
+    <p id="w3c-state"><a href="https://www.w3.org/standards/types#ED">W3C Editor's Draft</a> <time class="dt-published" datetime="2024-07-06">06 July 2024</time></p>
     <details open="">
       <summary>More details about this document</summary>
       <dl>
@@ -1761,7 +1770,8 @@ <h1 id="title" class="title">Privacy Principles</h1>
 transferred elsewhere.</li>
 </ul>
 <p>Portability is needed to support a <a data-link-type="dfn|abstract-op" href="#dfn-individual" class="internalDFN" id="ref-for-dfn-individual-71">person</a>'s ability to make choices about services with
-different data practices. Standards for interoperability are essential for effective re-use.</p>
+different data practices. Standards for interoperability are essential for effective re-use.
+Porting user data involves security and privacy risks described in [<cite><a class="bibref" data-link-type="biblio" href="#bib-portability-threat-model" title="User Data Portability Threat Model">Portability-Threat-Model</a></cite>].</p>
 <ul>
 <li><p>The <dfn data-export="" id="dfn-right-to-correct" tabindex="0" aria-haspopup="dialog" data-dfn-type="dfn">right to correct</dfn> <a data-link-type="dfn|abstract-op" href="#dfn-data" class="internalDFN" id="ref-for-dfn-data-34">data</a> about oneself, to ensure that one's
 <a data-link-type="dfn|abstract-op" href="#dfn-identity" class="internalDFN" id="ref-for-dfn-identity-3">identity</a> is properly reflected in a system.</p>
@@ -2646,6 +2656,8 @@ <h1 id="title" class="title">Privacy Principles</h1>
       <a href="https://wicg.github.io/performance-measure-memory/"><cite>Measure Memory API</cite></a>.  W3C. Draft Community Group Report. URL: <a href="https://wicg.github.io/performance-measure-memory/">https://wicg.github.io/performance-measure-memory/</a>
     </dd><dt id="bib-pew-harassment">[PEW-Harassment]</dt><dd>
       <a href="https://www.pewresearch.org/internet/2021/01/13/the-state-of-online-harassment/"><cite>The State of Online Harassment</cite></a>.  Pew Research Center. January 2021. URL: <a href="https://www.pewresearch.org/internet/2021/01/13/the-state-of-online-harassment/">https://www.pewresearch.org/internet/2021/01/13/the-state-of-online-harassment/</a>
+    </dd><dt id="bib-portability-threat-model">[Portability-Threat-Model]</dt><dd>
+      <a href="https://dtinit.org/assets/ThreatModel.pdf"><cite>User Data Portability Threat Model</cite></a>. Lisa Dusseault.  Data Transfer Initiative. URL: <a href="https://dtinit.org/assets/ThreatModel.pdf">https://dtinit.org/assets/ThreatModel.pdf</a>
     </dd><dt id="bib-privacy-behavior">[Privacy-Behavior]</dt><dd>
       <a href="https://www.heinz.cmu.edu/~acquisti/papers/AcquistiBrandimarteLoewenstein-S-2015.pdf"><cite>Privacy and Human Behavior in the Age of Information</cite></a>. Alessandro Acquisti; Laura Brandimarte; George Loewenstein.  Science. URL: <a href="https://www.heinz.cmu.edu/~acquisti/papers/AcquistiBrandimarteLoewenstein-S-2015.pdf">https://www.heinz.cmu.edu/~acquisti/papers/AcquistiBrandimarteLoewenstein-S-2015.pdf</a>
     </dd><dt id="bib-privacy-concerned">[Privacy-Concerned]</dt><dd>
