Topics
Six ways into the writing, from agent identity to password policy.
Agentic EngineeringBuilding software with coding agents, and giving agents scoped, revocable authority over the tools they use.12 entries
Identity & AuthOpenID Connect, OAuth, passkeys and step-up: who is acting, on whose behalf, and how strongly that was proven.20 entries
AppSecSecure defaults, platform-level controls and the attacks they have to hold against, from phishing to supply chains.15 entries
PasswordsPassword policies that people can follow, systems that do not punish password managers, and the attacks on reused credentials.10 entries
Tokens & JWTJSON Web Tokens and the JOSE family: what tokens are for, how they are signed, encrypted and verified, and where they go wrong.7 entries
Engineering PracticeNotes from running software: cloud infrastructure, European hosting, tooling and the occasional migration.12 entries