42 articles tagged Identity.
If you’ve spent any time reading about modern cryptography — especially BBS Signatures, attribute-based credentials, or identity-based encryption — you’ve probably encountered the phrase bilinear pairing.
Read article: Bilinear Pairings: Modern Privacy-Preserving CryptographyFor decades, digital identity has operated on a remarkably inefficient principle, “If someone asks for one piece of information, give them everything.”
Read article: Selective Disclosure: Finally, an Identity System That Knows When to Stop TalkingIdentity & Access Management (IAM) has spent decades answering fairly simple questions: “Who are you?” and “What are you allowed to do?”
Read article: Verifiable Credentials: The Next Evolution of Identity & Access ManagementFor decades, digital identity has followed a remarkably simple philosophy, “Tell me everything about yourself, and I’ll decide whether you may proceed.”
Read article: Privacy-Preserving Identity: Proving What Matters Without Revealing EverythingOr: How the Identity Industry Invented a Cryptographically Signed Phone Book
Read article: OpenID Federation Spec: Because Exchanging Metadata Spreadsheets Was Apparently Not a Great…There are moments in software development when you ask yourself an important question:
Read article: Our Identity Protocol Debugger Now Supports WS-TrustIf you’ve ever opened the specifications surrounding SD-JWT Verifiable Credentials and thought, “Surely this is a straightforward document that defines a credential format.”
Read article: SD-JWT VC: The Identity Industry’s Latest Attempt to Win a Nobel Prize in AcronymsIdentity engineers have a complicated relationship with SAML.
Read article: The OAuth2/OIDC Debugger Has Learned a New Trick: SAML2 Support Is HereThis is a collection of blog posts about my OpenSource Software Project, OAuth2 / OIDC Debugger.
Read article: Identity Protocol Debugger + IDPTools SeriesFor decades, organizations have focused on keeping attackers out. Firewalls, antivirus software, intrusion detection systems, IAM solutions, and the like all serve a common purpose to prevent unauthorized access. However, many security incidents do not begin with an external attacker breaking in.…
Read article: Data Loss Prevention (DLP): Keeping Your Organization’s Secrets from Walking Out the Door
