Justin Richer reposted
WIMSE has gotten a lot more interesting. Workload identity is now running into AI agents, delegation, authorization, attestation, discovery, and cross-domain trust. Here’s what the IETF group is building—and why it’s worth…
Justin Richer
@justin.richer.org
Security architect, musician, author, game designer, and otherwise boring guy. Opinions are not facts.
194 followers43 following41 posts
Justin Richer reposted
WIMSE has gotten a lot more interesting. Workload identity is now running into AI agents, delegation, authorization, attestation, discovery, and cross-domain trust. Here’s what the IETF group is building—and why it’s worth…
Last night, I vibe coded an app to help me take notes while solving randomized puzzles in one of my favorite puzzle games, HexCells Infinite. It's not a solver, it's just there so I can write down things I'm trying. jricher.github.io/hexcells-not...
Last night, I vibe coded an app to help me take notes while solving randomized puzzles in one of my favorite puzzle games, HexCells Infinite. It's not a solver, it's just there so I can write down things I'm trying. jricher.github.io/hexcells-not...
Last night, I vibe coded an app to help me take notes while solving randomized puzzles in one of my favorite puzzle games, HexCells Infinite. It's not a solver, it's just there so I can write down things I'm trying. jricher.github.io/hexcells-not...
The authorization code in OAuth 2 needs to get back to the client, but what if you can't read a URL on the return? I think we can use HKDF and a bit of copy-and-paste to get by. justinsecurity.medium.com/out-of-band-...
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Curl has added experimental support for HTTP Message Signatures (RFC9421) in the next release! daniel.haxx.se/blog/2026/07...
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
I'm excited to be part of an event with @justin.richer.org next week. I learn so much every time I talk with him! We're going to discuss identity architecture that support zero trust: VCs, NHI, GNAP, SPIFFE and more. You can join us and have your own questions answered: www.dock.io/live-event-c...
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
Justin Richer reposted
A new small update to mkjwk.org, thanks to some folks from the community. A couple small bugs were fixed, plus you can now copy and save a key configuration as a URL that you can pass around. This doesn't copy your key values, but it does set all the generator's parameters.
Justin Richer reposted
Replying to @desertbus.org
All righty, we got the all clear this time. Follow Dan as he explores the "cost" of a Desert Bus:
Justin Richer reposted
"There's a there there." #ietf124 Lots of enthusiasm and positivity (and advice from experienced folks) for forming an #atproto WG at @ietf.org We had 130 people on the stream and a very active chat. Great job @bnewbold.net and @dholms.xyz and everyone else. Thank you all for showing up! 👏
We are here in the @ietf.org BOF meeting for #atprotocol Lots of friends from the community here to show support ✊
Justin Richer reposted
Justin Richer reposted
Thousands of years before Jimmy Kimmel and Stephen Colbert got under President Trump's skin, ancient Greek and Roman poets and philosophers paid a heavy price for displeasing heads of state.
Justin Richer reposted
Justin Richer reposted