Everyone understands why a car should be more secure than a phone. Embedded applications typically request special privileges such as playing sound, sending SMS or geolocating. Those running on vehicles, while having the same requirements, need to be more strictly constrained to prevent dramatic consequences on equipment, driver and passengers.

The most common motivation to ignore security is cost reduction and time-to-market. Developing secure HTML5 applications should be smooth and simple. This talk presents a model of architecture leveraging modern tools such as Gulp, Angular and Foundation6 to simplify the production of applications for the automotive industry, while respecting strong security constraints.