This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit

Web Standards and Specifications

Revision as of 14:53, 12 July 2006 by Bikram (talk | contribs)

Jump to: navigation, search

WASS: Web application standards and specifications

The current article will present a high level overview of the various standards being used in web-applications; which of these are current or outdated, and more importantly which of the standards will be useful in implementing a particular type of application. Basically, it will help in understanding the various W3C, WS-I and other web application standards, and find relevance for them in the applications that we design and develop.

This article is aimed at developers and architects to make effective choices in designing and implementing robust, useful and secure web applications.

Some primary web standards bodies are:


Internet Engineering Task Force ( - One of the primary bodies involved in the development of core internet standards, e.g. networking, routing, mail etc.

Their scope is pretty wide, everything “above the wire and below the application”, as described by "Scott Bradner" in "" article. Some of the important contributions include: IP, TCP, HTTP, FTP, VPN, LDAP, and many more. Further, in his presentation, Scott describes the scope of other "Standards Development Organisations" (SDOs), as primarily involved in extending and fixing IETF standards, which is correct, as we shall see later in the article.

A sister organisation is, which is fixed on defining the future of internet standards.

They even have a education page:

This article is a stub. You can help OWASP by expanding it or discussing it on its Talk page.