I contribute to the evolution of the Web through research, specification development, and architectural review within the W3C ecosystem. My goal is to ensure the web platform remains secure, privacy-preserving, and interoperable.
W3C Technical Architecture Group (TAG)
Associate · 2025–Present
The TAG is a special working group chartered to steward the Web architecture. I contribute to horizontal reviews of emerging specifications, ensuring they align with modern privacy, security, and design principles.
Selected Architectural Finding:
- Agentic Web (under development): Editor in scoping a TAG finding on scoping the definition of agentic web in the era of AI agents prevalence.
- Global Components in User Agents (under development): Editor in a TAG finding on Global components in which browser APIs rely in the user agent.
Specification Editing
I actively translate technical requirements into formal Web standards.
- Translation API: [Editor] Shaping the standard for native, on-device translation capabilities within the browser.
- Language Detection API: [Editor] Standardising how browsers expose language detection to developers while mitigating fingerprinting vectors.
- Locality API (under development):[Editor]
Previous Standards Work
W3C Device & Sensors Working Group (DAS) Invited Expert · 2018–2025
I spent seven years steering the privacy and security threat models for hardware-level web APIs. This work directly translated my earlier academic research on sensor vulnerabilities into platform-level mitigations, preventing fingerprinting and unauthorized sensor access across major browser engines.
Impact
- Browser Security Changes: Influenced sensor privacy and security implementations in Apple Safari and Mozilla Firefox. Also, discovered many privacy leakages in Private Browsing in all major browsers (Apple Safari, Mozilla Firefox and Google Chrome).
- Web Standards: Directly informed W3C specifications, particularly regarding pressure-sensor standardization and Motion/Orientation API privacy (2016).