@@ -14,7 +14,7 @@ Former Editor: Lea Verou, Invited Expert, https://lea.verou.me, w3cid 52258
1414Former Editor : Sangwhan Moon, w3cid 42399, Google https://www.google.com/, https://sangwhan.com
1515Former Editor : Domenic Denicola, Google https://www.google.com/, https://domenic.me/, [email protected] 1616Former Editor : Travis Leithead, Microsoft, [email protected] 17- Abstract : This document contains a set of design principles to be used when designing web platform technologies. These principles have been collected during the Technical Architecture Group's discussions in <a href="https://github.com/w3ctag/design-reviews/">reviewing</a> developing specifications, and build upon the Ethical Web Principles [[ETHICAL-WEB ]]. We encourage specification designers to read this document and use it as a resource when making design decisions.
17+ Abstract : This document contains a set of design principles to be used when designing web platform technologies. These principles have been collected during the Technical Architecture Group's discussions in <a href="https://github.com/w3ctag/design-reviews/">reviewing</a> developing specifications, and build upon the Ethical Web Principles [[ethical-web-principles ]]. We encourage specification designers to read this document and use it as a resource when making design decisions.
1818Default Biblio Status : current
1919Markup Shorthands : markdown on
2020Boilerplate : feedback-header off
@@ -53,7 +53,7 @@ urlPrefix: https://www.rfc-editor.org/rfc/rfc9110.html; spec: rfc9110
5353<h2 id="basic-principles">Principles behind design of Web APIs</h2>
5454
5555The Design Principles are directly informed by the ethical framework
56- set out in the Ethical Web Principles [[ETHICAL-WEB ]] .
56+ set out in the Ethical Web Principles [[ethical-web-principles ]] .
5757These principles provide concrete practical advice
5858in response to the higher level ethical responsibilities
5959that come with developing the web platform.
@@ -68,7 +68,7 @@ be sure to understand and document the user need that the API aims to address.
6868
6969[The internet is for end users] (https://tools.ietf.org/html/rfc8890):
7070any change made to the web platform has the potential to
71- [affect vast numbers of people] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#allpeople),
71+ [affect vast numbers of people] (https://www.w3.org/TR /ethical-web-principles/#allpeople),
7272and may have a profound impact on any person's life. [[RFC8890]]
7373
7474User needs come before the needs of web page authors,
@@ -86,8 +86,8 @@ and theoretical concerns reflect underlying needs of all of these groups.
8686
8787See also:
8888
89- * [The web should not cause harm to society] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#noharm)
90- * [The web must enhance individuals' control and power] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#control)
89+ * [The web should not cause harm to society] (https://www.w3.org/TR /ethical-web-principles/#noharm)
90+ * [The web must enhance individuals' control and power] (https://www.w3.org/TR /ethical-web-principles/#control)
9191* [[RFC8890]]
9292
9393<h3 id="safe-to-browse">It should be safe to visit a web page</h3>
@@ -100,7 +100,7 @@ The Web is named for its hyperlinked structure.
100100In order for the web to remain vibrant,
101101users need to be able to expect that merely visiting any given link
102102won't have implications for the security of their computer,
103- or for any essential aspects of their [privacy] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#privacy).
103+ or for any essential aspects of their [privacy] (https://www.w3.org/TR /ethical-web-principles/#privacy).
104104
105105For example, an API that allows any website to
106106[detect the use of assistive technologies] (#do-not-expose-use-of-assistive-tech)
@@ -143,7 +143,7 @@ Users depend on trusted user interfaces
143143such as the address bar, security indicators and permission prompts,
144144to understand who they are interacting with and how.
145145These trusted user interfaces must be able to be designed in a way
146- that enables users to trust [and verify] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#verify)
146+ that enables users to trust [and verify] (https://www.w3.org/TR /ethical-web-principles/#verify)
147147that the information they provide is genuine,
148148and hasn't been spoofed or hijacked by the website.
149149
@@ -163,7 +163,7 @@ In the context of fulfilling a user need,
163163a web page may want to make use of a feature
164164that has the potential to cause harm.
165165Features that have this potential for harm should be designed such that people can give
166- [meaningful consent] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#control) for that feature to be used,
166+ [meaningful consent] (https://www.w3.org/TR /ethical-web-principles/#control) for that feature to be used,
167167and that they can refuse consent effectively.
168168
169169In order to give *meaningful consent*, the user must:
@@ -210,7 +210,7 @@ no location information is available to the Web page.
210210
211211See also:
212212
213- * [The web is secure, and respects people's privacy] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#privacy)
213+ * [The web is secure, and respects people's privacy] (https://www.w3.org/TR /ethical-web-principles/#privacy)
214214* [Consent Principles] (https://www.w3.org/TR/privacy-principles/#consent-principles)
215215* [Permissions] (https://www.w3.org/TR/permissions/)
216216
@@ -258,7 +258,7 @@ a Web page may be viewed on virtually any consumer computing device
258258at a very wide range of screen sizes,
259259may be used to generate printed media,
260260and may be interacted with in a large number of different ways.
261- New features should match the [existing flexibility] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#render)
261+ New features should match the [existing flexibility] (https://www.w3.org/TR /ethical-web-principles/#render)
262262of the web platform.
263263
264264<div class="note">
@@ -719,10 +719,10 @@ Some people use [private browsing mode](https://www.w3.org/2001/tag/doc/private-
719719to protect their own personal safety.
720720Because of this, the fact that someone is using private browsing mode
721721may be [sensitive information] (https://www.w3.org/TR/security-privacy-questionnaire/#sensitive-data) about them.
722- This information may [harm] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#noharm) people
722+ This information may [harm] (https://www.w3.org/TR /ethical-web-principles/#noharm) people
723723if it is revealed to a web site controlled by others who have power over them
724724(such as employers, parents, partners,
725- or [state actors] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#expression)).
725+ or [state actors] (https://www.w3.org/TR /ethical-web-principles/#expression)).
726726
727727Given such dangers,
728728websites should not be able to detect that private browsing mode is engaged.
@@ -750,7 +750,7 @@ without revealing that private browsing mode is engaged.
750750
751751See also:
752752
753- * [Security and privacy are essential] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#privacy)
753+ * [Security and privacy are essential] (https://www.w3.org/TR /ethical-web-principles/#privacy)
754754* [What data does this specification expose to an origin?] (https://www.w3.org/TR/security-privacy-questionnaire/#underlying-platform-data)
755755* [[#private-browsing-mode]]
756756
@@ -803,16 +803,16 @@ See also:
803803Make sure that your API doesn't provide a way
804804for authors to detect that a user is using assistive technology.
805805
806- [The web platform must be accessible to people with disabilities.] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#allpeople)
806+ [The web platform must be accessible to people with disabilities.] (https://www.w3.org/TR /ethical-web-principles/#allpeople)
807807If a site can detect that a user is using an assistive technology,
808808that site can deny or restrict the user's access to the services it provides.
809809
810810People who make use of assistive technologies
811- are often [vulnerable members of society] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#noharm);
811+ are often [vulnerable members of society] (https://www.w3.org/TR /ethical-web-principles/#noharm);
812812their use of assistive technologies is [sensitive information] (https://www.w3.org/TR/security-privacy-questionnaire/#sensitive-data) about them.
813813If an API provides access to this information,
814814this sensitive information may be revealed to others
815- (including [state actors] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#expression))
815+ (including [state actors] (https://www.w3.org/TR /ethical-web-principles/#expression))
816816who may wish them harm.
817817
818818Sometimes people propose features which aim to improve the user experience
@@ -837,7 +837,7 @@ which don't reveal the use of assistive technology.
837837See also:
838838
839839* [Web Technology Accessibility Guidelines] (https://w3c.github.io/apa/fast/)
840- * [Security and privacy are essential] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#privacy)
840+ * [Security and privacy are essential] (https://www.w3.org/TR /ethical-web-principles/#privacy)
841841* [What data does this specification expose to an origin?] (https://www.w3.org/TR/security-privacy-questionnaire/#underlying-platform-data)
842842
843843<h3 id="require-user-activation">Require user activation for powerful APIs</h3>
@@ -3206,7 +3206,7 @@ the user experience will suffer.
32063206(This problem is even more pronounced on low-powered devices,
32073207which are more likely to be used by disadvantaged or marginalized users.
32083208Remember,
3209- [the web is for all people] (https://www.w3.org/2001/tag/doc /ethical-web-principles/#allpeople).)
3209+ [the web is for all people] (https://www.w3.org/TR /ethical-web-principles/#allpeople).)
32103210
32113211Therefore,
32123212APIs which would often block the main thread if used as intended
0 commit comments