Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
The Internet Engineering Task Force (IETF) has 10K+ published Request For Comments (RFCs) documents. The industry hears about RFCs all the time. But, as the name implies (“request for comments”) that isn’t the final step in the process. A very small number of RFCs are promoted to Internet…
Read article: How Many IETF RFCs Actually Become Standards?If you’ve ever opened the specifications surrounding SD-JWT Verifiable Credentials and thought, “Surely this is a straightforward document that defines a credential format.”
Read article: SD-JWT VC: The Identity Industry’s Latest Attempt to Win a Nobel Prize in AcronymsTravelers Rights. Or, lack thereof.
Read article: Your Phone vs. The Border: A Traveler’s Privacy Tour of the G20There is a special kind of optimism that exists in software development.
Read article: Input Validation: Because Users Are Creative, and Attackers Are More CreativeFor most corporate IT workshops, we are often trying to abstract as many security details away from application code as possible. I understand things may work differently at Big Tech / shops-with-many-competent developer resources. I initially started jotting down notes for this blog post while I…
Read article: Secure Code Reviews: Finding Security Issues Before Attackers DoFor decades, organizations have enjoyed a comfortable arrangement with modern cryptography.
Read article: Post-Quantum Migration Mistakes: How to Accidentally Recreate the Y2K Panic, But With More MathIdentity engineers have a complicated relationship with SAML.
Read article: The OAuth2/OIDC Debugger Has Learned a New Trick: SAML2 Support Is HereIf you’ve spent any amount of time integrating OAuth 2.0 or OpenID Connect (OIDC), you’ve probably experienced the same cycle:
Read article: Introducing IDPTools: An Open Source OAuth2 & OpenID Connect DebuggerThis is a collection of blog posts about my OpenSource Software Project, OAuth2 / OIDC Debugger.
Read article: Identity Protocol Debugger + IDPTools SeriesThis is the next post in my Post-Quantum Cryptography Series.
Read article: IBM Says It’s Ready to Scale Quantum ComputingLooking for something specific? Browse all 124 topics.
