Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
If you’ve spent any amount of time integrating OAuth 2.0 or OpenID Connect (OIDC), you’ve probably experienced the same cycle:
Read article: Introducing IDPTools: An Open Source OAuth2 & OpenID Connect DebuggerThis is a collection of blog posts about my OpenSource Software Project, OAuth2 / OIDC Debugger.
Read article: Identity Protocol Debugger + IDPTools SeriesThis is the next post in my Post-Quantum Cryptography Series.
Read article: IBM Says It’s Ready to Scale Quantum ComputingThis is the first of a two part series. In the second post, we will explore the privacy implications of traveler rights at the border across various countries.
Read article: What Rights Do Tourists and Long-Term Foreign Residents Have?Or: How Humanity Performed the Largest Calendar Data Correction in History
Read article: The Time We Deleted Eleven Days from ProductionFor most of human history, keeping track of dates was relatively straightforward. The sun came up; the sun went down.
Read article: The Year 2038 Problem: When Computers Discover Time Is HardThis post is part of my “Post-Quantum Cryptography Series”.
Read article: US Government Mandates All Agencies Fast-Track PQC MigrationAuthentication is one of the most fundamental concepts in application security. Most developers spend considerable time designing how authenticated users are represented, authorized, and managed. Surprisingly, much less attention is given to the opposite state of users who have not authenticated at…
Read article: Understanding Unauthenticated Traffic: How Applications and APIs Represent The Unauthenticated UserFor decades, organizations have focused on keeping attackers out. Firewalls, antivirus software, intrusion detection systems, IAM solutions, and the like all serve a common purpose to prevent unauthorized access. However, many security incidents do not begin with an external attacker breaking in.…
Read article: Data Loss Prevention (DLP): Keeping Your Organization’s Secrets from Walking Out the DoorThere have been many questions about Post-Quantum Cryptography (PQC) recently with clients. So, I figured this would be a good topic to explore.
Read article: Post-Quantum Cryptography SeriesLooking for something specific? Browse all 124 topics.
