Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
There is a recurring problem in digital identity: I want to prove something about myself, but, I don’t necessarily want to tell you everything about myself in the process.
Read article: Anonymous Credentials: Prove Something Without Telling Everyone Who You AreFor all the excitement around Verifiable Credentials, there is a rather mundane problem hiding underneath the cryptography:
Read article: OID4VCI: OAuth2 Comes to the Credential Issuance ProblemThere are an almost ridiculous number of elliptic curves.
Read article: Why Do Cryptographic Standards Pick Specific Elliptic Curves?There is a glamorous side to identity management, if any of this actually constitutes glamorous.
Read article: SCIM: System for Cross-Domain Identity ManagementThis is the first part of a series on the topic of Model Context Protocol (MCP) Governance.
Read article: MCP Governance: Part 1The Model Context Protocol, or MCP, has quickly become one of the most important pieces of infrastructure in the emerging Agentic AI ecosystem.
Read article: Model Context Protocol: MCP, OAuth2, and the Identity Problem of Agentic AIOne of the most powerful security controls in an AI system is also one of the least glamorous:
Read article: Redaction in LLM Security: Sometimes the AI Doesn’t Need to KnowDelegation is a concept that has always fascinated me in the identity space. It enables secure identity propagation with tokens (assertions, tickets, etc) being properly scoped. As functionality in my Identity Protocol Debugger has continued to evolve, I wanted to add a feature that would make it…
Read article: OAuth2 + OIDC + Delegation: An exampleThere is a simple idea hiding underneath a lot of enterprise data security in that If someone doesn’t need to see the real data, don’t show them the real data.
Read article: Data Masking: Because Sometimes the Best Way to Protect Data Is to Stop Showing ItLooking for something specific? Browse all 124 topics.
