Posts

a session at Authenticate 2024 which dives into the intricate relationships between websites, browsers, apps, operating systems, passkey providers, and security keys, and each party’s role and impact on user experience and functionality.

A quick guide on creating a basic short link / redirect service for free using Cloudflare Workers KV

an overview of the Digital Credentials API in the context of NIST’s NCCoE mDL program

FedCM 101 presentation at the OAuth Security Workshop 2024

a session at Authenticate 2023 on the basics of passkeys, phishing resistance, some history, and a look at the future

a session at Identiverse 2023 on using the Continous Access Evaluation Profile with the Shared Signals Framework to signal across different vendor ecosystems changes in session context

a session at Identiverse 2020 on network authentication and identity in the zero trust networking era