Security

Sir Tim Berners-Lee defends decision not to bake security into www

'The idea that privacy is dead is hopelessly sad'


IP Expo Sir Tim Berners-Lee has defended his decision not to build in security at the onset of the world wide web.

It’s easy to be wise in hindsight, but Sir Tim explained that at the point he invented the world wide web 25 years ago, he wanted to create a platform that developers would find familiar and easy to use. Baking in security at that point might have worked against that goal, he said.

“[The web] might not have taken off if it had been too difficult,” he told an audience at IPExpo Europe this morning.

Sir Tim’s views are in contrast with those of another internet pioneer, Vint Cerf, who recently said he regretted not building in security to basic internet protocols. Berners-Lee strongly supported the current push towards always-on crypto (https) for websites now underway, so his differing views are more to do with timing and priorities than principles.

During a keynote presentation at the infrastructure conference, Sir Tim discussed a vision for the web where users are more in control of managing their privacy.

"The idea that privacy is dead is hopelessly sad,” Sir Tim Berners-Lee said. “We have to build systems that allow for privacy.”

“People have the right to see how their data is being used,” he said, adding that he prefer to talk about “rich data” rather than Big Data.

For example, personal medical data should be accessible to doctors and emergency responders but not accessible to health insurance firms, he said.

Targeted advertisements are not the whole of the future of the web either, said Berners-Lee. Ads can make consumers feel “queasy”, according to Sir Tim, who called for the development of more imaginative business models.

“We should build a world where I have control of my data and sell it to you. Users should have control, access to and ownership of their data,” Berners-Lee said.

Much of Berners-Lee’s keynote address focused on the “need to fight for net neutrality” a repeated theme of his recent speeches.

“The internet is a platform,” he said. “It doesn’t have an attitude about what you do with it.”

"We have to keep fighting for net neutrality... an internet without attitude."

Although the keynote address was billed as offering a glimpse at what the web might look like in 2050, Sir Tim baulked at engaging in any crystal-ball gazing. “I don’t like giving predictions. The future is what we build,” he said. ®

Send us news
38 Comments

404 Day celebrates the internet's most infamous no-show

Nothing is forever, not even a web page

Netherlands arm of KPMG fined $25M for cheating in exams

Staff followed US lead and shared answers after move to online testing

CERN celebrates 30 years since releasing the web to the public domain

Software vendors and the EU weren’t interested, so giving it away became the best option

IBM's Weather Company leaked my personal info to analytics, thunders netizen

Video watching habits and other data just handed over, lawsuit claims

USENET, the OG social network, rises again like a text-only phoenix

Alive and still quite vigorous considering its age

How to spot OpenAI's crawler bot and stop it slurping sites for training data

Aww, c'mon, let us scrape your pages, we've got billions at stake

Yahoo<em>!</em> comeback<em>!</em> continues<em>!</em> as<em>!</em> fresh<em>!</em> listing<em>!</em> planned<em>!</em>

Boss says it has traffic galore and a beautiful balance sheet

Google accused of ripping off advertisers with video ads no one saw. Now, the expert view

Web giant also hits back ... right as YouTube steps up war on advert blockers

Requiem for Google Reader, dead for a decade but not forgotten

RSS pioneer Dave Winer sees Mastodon as a positive sign

Biden attacks Big Tech's data addiction, wants more protection for kids

Old man yells at cloud, literally

W3C's planned transition to HTTPS stymied by legacy laggards

Timing for plan to redirect HTTP requests now indeterminate to allow for further feedback

W3C overrules objections by Google, Mozilla to decentralized identifier spec

Oh no, he DIDn't