50 articles tagged Identity.
Identity & Access Management (IAM) has spent decades answering fairly simple questions: “Who are you?” and “What are you allowed to do?”
Read article: Verifiable Credentials: The Next Evolution of Identity & Access ManagementFor decades, digital identity has followed a remarkably simple philosophy, “Tell me everything about yourself, and I’ll decide whether you may proceed.”
Read article: Privacy-Preserving Identity: Proving What Matters Without Revealing EverythingOr: How the Identity Industry Invented a Cryptographically Signed Phone Book
Read article: OpenID Federation Spec: Because Exchanging Metadata Spreadsheets Was Apparently Not a Great…There are moments in software development when you ask yourself an important question:
Read article: Our Identity Protocol Debugger Now Supports WS-TrustIf you’ve ever opened the specifications surrounding SD-JWT Verifiable Credentials and thought, “Surely this is a straightforward document that defines a credential format.”
Read article: SD-JWT VC: The Identity Industry’s Latest Attempt to Win a Nobel Prize in AcronymsIdentity engineers have a complicated relationship with SAML.
Read article: The OAuth2/OIDC Debugger Has Learned a New Trick: SAML2 Support Is HereThis is a collection of blog posts about my OpenSource Software Project, OAuth2 / OIDC Debugger.
Read article: Identity Protocol Debugger + IDPTools SeriesFor decades, organizations have focused on keeping attackers out. Firewalls, antivirus software, intrusion detection systems, IAM solutions, and the like all serve a common purpose to prevent unauthorized access. However, many security incidents do not begin with an external attacker breaking in.…
Read article: Data Loss Prevention (DLP): Keeping Your Organization’s Secrets from Walking Out the DoorModern computing systems are built around a strange tradeoff in that proving identity or trust usually requires revealing information. Passwords, account numbers, private keys, medical records, financial history — all of these are routinely exposed simply to verify a claim.
Read article: Zero-Knowledge Proofs: Proving Something Without Revealing AnythingI’ve been wanting to use this as a title for a blog post for a while now. It’s actually one of the quotes I have in my personal email signature. The open question has been what the topic of this blog post should be. There are so many asinine stories from fifteen years of consulting that could be…
Read article: Any Day Your Socks Don’t Burst Into Flames Is A Good Day
