Home
About
Blog
Contact

AI / LLM Software Security Series

June 4, 2026by Robert Broeckelmann

AI Security
Application Security
LLMs
Series
AI
Security

This series explores the “OWASP Top 10 for LLM Applications 2025” issues.

AI / LLM Software Security: Part 1
AI / LLM Software Security: Part 2
AI / LLM Software Security: Part 3
AI / LLM Software Security: Part 4
AI / LLM Software Security: Part 5

To see the original source material, check out the OWASP Top 10 for LLM Applications 2025.

Extra Image I generated about AI Subjugation of Humanity (ChatGPT Generated) / Author

Originally published on Medium.

Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an Identity

August 20, 2026

Access Tokens
Authorization
Identity & Access Management

One of the most fundamental questions in any identity or authorization system is how does the system know that the party presenting a credential is actually entitled to use it?

Read article →: Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an Identity

Holder of Key vs. Proof of Possession: Two Sides of Cryptographic Identity

August 19, 2026

Access Tokens
Authentication
Identity & Access Management

For years, identity protocols have used phrases such as Holder of Key, Proof of Possession, Key Binding, and Bearer almost interchangeably.

Read article →: Holder of Key vs. Proof of Possession: Two Sides of Cryptographic Identity

Content Security Policy: Putting the Browser on a Security Diet

August 19, 2026

Application Security
Web Application Security
Security

Web applications have become remarkably powerful.

Read article →: Content Security Policy: Putting the Browser on a Security Diet

Site design by Yvette Richter Design

Proud sponsor of the Open Source IDPTools Project. Github project

More articles

Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an Identity

Holder of Key vs. Proof of Possession: Two Sides of Cryptographic Identity

Content Security Policy: Putting the Browser on a Security Diet