OAuth2 Access Tokens and Multiple Resources Series
This article is a place my other blog posts can point at when referencing this series.
Originally published on Medium.
More articles
Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an Identity
- Access Tokens
- Authorization
- Identity & Access Management
One of the most fundamental questions in any identity or authorization system is how does the system know that the party presenting a credential is actually entitled to use it?
Read article →: Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an IdentityHolder of Key vs. Proof of Possession: Two Sides of Cryptographic Identity
- Access Tokens
- Authentication
- Identity & Access Management
For years, identity protocols have used phrases such as Holder of Key, Proof of Possession, Key Binding, and Bearer almost interchangeably.
Read article →: Holder of Key vs. Proof of Possession: Two Sides of Cryptographic IdentityContent Security Policy: Putting the Browser on a Security Diet
- Application Security
- Web Application Security
- Security
Web applications have become remarkably powerful.
Read article →: Content Security Policy: Putting the Browser on a Security Diet