Three decades of digital identity systems, sorted by how they actually failed, and why the half of the system that decides adoption is the half nobody funds.

Three decades of digital identity systems, sorted by how they actually failed, and why the half of the system that decides adoption is the half nobody funds.

Two services, one bug, every instrument calling them identical. We scaled security's answers but never the reasoning behind them, and machine reasoning may finally change that.

One word, “sandbox,” has erased the distinctions between container, VM, confidential VM, and enclave — which is exactly how AI gets sold as secure and private. A field guide to what each primitive pro...

The economics of cognition, the limits of GRC software, and what AI actually changes

How periodic audit came to be, why its epistemic reach is shrinking, and what AI does to the mismatch

How the Internet will decide which public keys to trust once signatures no longer fit on the wire

Quantitative analysis of 96 trusted CAs: market share, concentration risk, compliance incidents, distrust history, and root program governance. Updated daily.