Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
There are few phrases in enterprise IT capable of making a room become noticeably quieter than, “We need to talk about data governance.”
Read article: Enterprise Data Governance: You Can’t Govern What You Don’t Know You HaveI once worked with an architect who had a fascinating theory about software development.
Read article: The Software Architect Who Believed in Bug-Free SoftwareThis is a collection of all the posts that I’ve written related to AI and LLM applications.
Read article: AI / LLM-Related SeriesAI governance is one of those phrases that sounds reassuring right up until someone asks what it actually means.
Read article: AI Governance, Model Governance, and MCP Governance: Yes, Apparently We Need ThreeLet’s get something out of the way upfront.
Read article: Enterprise Asset Management: The Most Boring Thing You Absolutely NeedThere is a certain type of security engineer who hears the words Hardware Security Module and immediately pictures something the size of a washing machine, installed in a locked rack, surrounded by three layers of physical security, two security cameras, and a person whose entire job appears to be…
Read article: Hardware Security Modules (HSMs)One of the most fundamental questions in any identity or authorization system is how does the system know that the party presenting a credential is actually entitled to use it?
Read article: Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an IdentityFor years, identity protocols have used phrases such as Holder of Key, Proof of Possession, Key Binding, and Bearer almost interchangeably.
Read article: Holder of Key vs. Proof of Possession: Two Sides of Cryptographic IdentityWeb applications have become remarkably powerful.
Read article: Content Security Policy: Putting the Browser on a Security DietLooking for something specific? Browse all 124 topics.
