Ehsan Toreini
Web Architecture & Governance.
:: 367 Words

This is the part of my career where research, implementation, and standards meet: identifying a technical problem, understanding its implications at Web scale, and helping turn that understanding into a platform-level constraint or capability.

W3C Technical Architecture Group (TAG)

Associate · 2025–Present

TThe TAG is the W3C body responsible for stewarding the Web architecture.I contribute to horizontal reviews of emerging specifications, ensuring they align with modern privacy, security, and design principles.

Selected Architectural Finding:

  • Agentic Web (under development): Editor in TAG finding on the definition of agentic web in the era of AI agents prevalence.
  • Global Components in User Agents (under development): Editor in a TAG finding on Global components in which browser APIs rely in the user agent.
  • Age Assurance has become a concrete example of the architectural challenges that arise when regulatory requirements meet the open Web. My work in this area focuses on the privacy, security, proportionality, interoperability, and user-agency implications of age-related signals and verification mechanisms.

Specification Editing

My standards work sits at the point where architectural constraints become developer-facing capabilities.

  • Translation API: [Editor] Shaping the standard for native, on-device translation capabilities within the browser.
  • Language Detection API: [Editor] Standardising how browsers expose language detection to developers while mitigating fingerprinting vectors.

Standards Impact

  • At Global Digital Collaboration(GDC) 2026 in Geneva, I served as a panelist in three age-assurance breakouts, presenting the W3C TAG perspective on privacy, harms, proportionality, and architectural requirements in Digital Credentials and Age Assurance in the Web.

  • I co-chair the Emerging Trends in Web Advertising workshop at The Web Conference 2026, bringing together research and practice around privacy-preserving advertising, AI, immersive Web experiences, and the future of Web advertising. The findings directly inform web standardisation (See report).

Previous Standards Work

W3C Device & Sensors Working Group

Invited Expert · 2018–2025

I spent seven years working on the privacy and security threat models for hardware-level Web APIs. This work connected my academic research on sensor vulnerabilities with platform-level mitigations for fingerprinting and unauthorised sensor access in the Motion/Orientation APIs.