Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
I’ve discussed APIs and API Management in previous blog posts. These are among my older blog posts, but the points being made are, generally, still relevant. I’ve never published a blog post exclusively about API design. I have a blog post about “API Gateways and Multiple Consumer Types” where I…
Read article: API Design: Planned, Unplanned, Security and Utter ChaosI’ve been wanting to use this as a title for a blog post for a while now. It’s actually one of the quotes I have in my personal email signature. The open question has been what the topic of this blog post should be. There are so many asinine stories from fifteen years of consulting that could be…
Read article: Any Day Your Socks Don’t Burst Into Flames Is A Good DayYour non-production environments must have the same security capabilities as your production environment.
Read article: Non-Prod Environments Must Have The Same Security Protections As ProductionOver the course of my consulting career, I’ve been brought into organizations to troubleshoot “weird” problems on several occasions — those stories for another time. These engagements are often fun; though, can be very challenging. The organizations where we had the most success in tracking down…
Read article: Ability To Do Point In Time Restore / Rebuild Of EnvironmentsDigital sovereignty refers to a nation’s ability to control, regulate, and secure its digital infrastructure, data, platforms, and technological ecosystem in accordance with its own laws, values, and strategic interests.
Read article: What Is Digital Sovereignty?Your production environment should be isolated from your non-production environments. In fact, every application environment should be isolated from every other environment. Sounds simple in practice, but how does one accomplish this? Through a multi-layered isolation strategy:
Read article: Achieving Application Environment IsolationBut, let’s face it, you’re probably going to do it anyway.
Read article: No, You Shouldn’t Use Production Data For TestingHere is a collection of blog posts I’ve written about Privacy in the digital era.
Read article: Privacy SeriesDisclosures: AI (ChatGPT) assisted with summarizing this information.
Read article: Data Sovereignty Laws Around The WorldSome organizations keep following the same legacy, bad practices even though they know better. They keep doing it right up until the unfortunate happens.
Read article: Of Daffy Bastards And Goofy F*cks In The Land Of The Lost: Integration Anti-Patterns From The Dark SideLooking for something specific? Browse all 124 topics.
