IyaSec Blog
Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
Risk Management: Or How Corporate IT Learned to Fear Everything Except the Things That Actually…
There is a wonderful phrase that gets tossed around in corporate IT meetings.
Read article: Risk Management: Or How Corporate IT Learned to Fear Everything Except the Things That Actually…
OpenID Federation Spec: Because Exchanging Metadata Spreadsheets Was Apparently Not a Great…
Or: How the Identity Industry Invented a Cryptographically Signed Phone Book
Read article: OpenID Federation Spec: Because Exchanging Metadata Spreadsheets Was Apparently Not a Great…
Data Classification Best Practices: Knowing What Matters Before It Walks Out the Door
Organizations spend millions of dollars protecting data, yet many struggle to answer a surprisingly simple question:
Read article: Data Classification Best Practices: Knowing What Matters Before It Walks Out the Door
2 + Fish = Moon Rock: When Your Key Performance Indicator Dashboard Has More Charts Than Purpose
When the metrics you hold so dear no longer measure anything meaningful.
Read article: 2 + Fish = Moon Rock: When Your Key Performance Indicator Dashboard Has More Charts Than Purpose
Our Identity Protocol Debugger Now Supports WS-Trust
There are moments in software development when you ask yourself an important question:
Read article: Our Identity Protocol Debugger Now Supports WS-Trust
JWT as Oauth2 Access Tokens & Refresh Tokens— Invalidation: The Awkward Reality
I’ve touched on the topic of using JWT as an Access Token on several previous blog posts:
Read article: JWT as Oauth2 Access Tokens & Refresh Tokens— Invalidation: The Awkward Reality
BBS-2023: The Digital Signature That Knows When To Keep Its Mouth Shut
Most digital signatures have the subtlety of a foghorn.
Read article: BBS-2023: The Digital Signature That Knows When To Keep Its Mouth Shut
I Code in vi/vim and Loving It (And No, I’m Not Trying to Impress Anyone)
In 1996, I took my first Computer Science course in college. The professor encouraged us to use vi/vim. Later, at my first job out-of-school, the team was, also, using vi/vim. As the IDE craze took hold at the turn of the century (kind of weird typing that), I never really moved on from there. So,…
Read article: I Code in vi/vim and Loving It (And No, I’m Not Trying to Impress Anyone)Looking for something specific? Browse all 124 topics.