Every so often, I talk to someone who would probably make a very good member of the W3C Technical Architecture Group and discover that they have never seriously considered running. Sometimes they assume the TAG is mostly for browser engineers. Sometimes they think they do not know enough about the Web platform. Sometimes they have no idea what the work actually involves.

In this episode, Heather examines the gap between technical interoperability and real-world digital identity deployment. Wallets and verifiable credentials may successfully exchange information, but relying parties must navigate different wallets, browsers, operating systems, credential formats, trust models, and failure states. This episode explores why interoperability must include the full customer experience, not just protocol conformance. Heather considers the growing role of intermediaries, APIs, and verification platforms in absorbing complexity, while asking what happens to trust, privacy, correlation, and governance when another layer enters the identity transaction.

Discover how digital wallets and verifiable credentials are moving from pilots into real-world adoption, while revealing a critical gap: someone still has to accept the credential. Heather examines the verifier’s perspective, particularly as regulation accelerates digital identity adoption across Europe. This episode explores why compliance alone is not enough to create meaningful value. Heather considers how credentials could reduce manual review, fraud, data retention, and onboarding friction, while improving customer experience. The key question is simple: when a credential arrives, what old process goes away?

Discover how identity conferences can help practitioners stay current on digital identity, emerging standards, regulation, cybersecurity, and the challenges organizations are preparing to solve. Heather examines why choosing the right event matters when budgets, travel, and time are limited, and why there is no single best conference for everyone. This episode explores how to match conferences to your goals, whether you need enterprise identity insight, European policy perspectives, authentication expertise, or longer-term architectural thinking. Heather also considers what recordings miss: the informal conversations, unexpected connections, and human network that make conference attendance valuable.

Heather examines why making standards information public is not enough to make the work understandable. This episode explores the growing challenge of navigating specifications, document status, provenance, working group activity, and related standards across digital identity, AI, security, privacy, and other overlapping technical domains. Learn how structured standards data, APIs, and AI tools can make research more efficient without replacing human judgment. Heather explains why better transparency means making process context accessible, so implementers, architects, policymakers, researchers, and analysts can make informed decisions without years of institutional knowledge.

Heather explores why keeping up with standards development does not mean tracking everything. This episode looks at how a lightweight standards radar can surface emerging work across digital identity, AI, authorization, credentials, and related technologies, while recognizing that new ideas appear far faster than any individual can follow. Discover how automation, structured public data, and human judgment can work together to identify what deserves closer attention. Heather explains why Internet-Drafts provide signals rather than certainty, how context reveals momentum, and why useful awareness—not perfect completeness—is the more realistic goal.

I was talking with a colleague recently about governance, and somewhere in the conversation, we realized we were using the same word to describe two very different problems. ...

Web Authentication Level 3 is now a W3C Recommendation! This post covers the new features in L3 to support passkeys, advanced deployment scenarios, improved developer ergonomics, and a peek at what's ...

Learn why nation state politics are increasingly shaping technical standards and the future of the Internet. Drawing on reflections from IETF 126, Heather examines how regulatory pressure, geopolitical interests, and competing views of privacy, security, openness, and interoperability can influence standards development and individual contributors. Explore how to participate thoughtfully when larger forces enter the standards process. Heather considers practical ways to evaluate proposals beyond who submits them, recognize patterns, question architectural assumptions, and protect global interoperability while acknowledging legitimate policy concerns and the real harms the Internet can create.

Heather explores why technical standards have never been truly separate from politics, even when they remain nonpartisan. This episode examines how choices around interoperability, privacy, security, and user needs embed values into Internet standards, influencing trust, authority, and the relationships between people, institutions, and technology. Learn how standards bodies navigate issues such as end-to-end encryption, age assurance, surveillance, and global interoperability without becoming legislatures. Heather explains why making architectural values explicit strengthens technical credibility and helps standards communities respond to the growing pressures of regulation, governance, and digital policy.

Latest Episode All Episodes About the Podcast A Digital Identity Digest is an audio companion to my weekly blog. It provides clear, accessible summaries of timely identity topics, helping busy prof…

Heather examines why a simple conference selfie can become one of the most meaningful records of your professional life. Rather than posting for social media, she explores how preserving moments with colleagues, collaborators, and mentors helps capture the relationships that shape careers and strengthen professional communities. Discover how thoughtful conference etiquette, privacy, and consent fit alongside authentic networking and lasting connections. This episode reflects on memory, digital identity, and the people behind the work, offering a reminder that some of the most valuable professional moments are worth preserving, even if they never become public.

In this episode, Heather explores a practical framework for researching complex technology topics and building recommendations that stand up to scrutiny. From defining the right research question to evaluating academic literature, institutional reports, and real-world implementation, she explains how disciplined research creates stronger strategic decisions. Learn how source verification, outreach, structured evidence tracking, and thoughtful use of AI can strengthen research without replacing human judgment. Whether you're writing policy papers, standards proposals, or strategic recommendations, these methods help produce credible, transparent, and defensible work grounded in evidence rather than assumption.

Discover how the Identity Salon creates a high trust, vendor neutral space for senior identity practitioners to explore the five to seven year challenges shaping digital identity. Heather shares why forward looking conversations matter and how candid discussion can surface architectural assumptions before they become operational problems. Explore how identity proofing, digital wallets, AI agents, governance, delegation, and security architecture increasingly intersect. This episode offers a behind the scenes look at building the Identity Salon, producing Chatham House Rule reports, and creating sustainable conversations that help enterprise identity leaders prepare for what comes next.

Heather explores the fine line between healthy dissent and procedural obstruction in standards development, examining how appeals, objections, and governance processes can strengthen collaboration—or slowly undermine it. This episode considers why protecting fairness also requires protecting the people doing the technical work. Learn how process abuse affects standards organizations, contributor participation, and technical decision-making. Heather discusses practical ways to document recurring patterns, support chairs and editors, and preserve constructive disagreement without allowing procedural conflict to overwhelm progress or discourage future contributors.

Heather examines why choosing the right discovery mechanism is one of the most challenging aspects of digital identity architecture. This episode explores how DNS, well-known URIs, registries, and catalogs each solve different discovery problems, and why understanding trust, authority, and governance must come before selecting infrastructure. Discover how discovery mechanisms shape privacy, delegation, authorization, and system behavior. Heather explains why successful digital identity design depends on asking the right architectural questions first, ensuring discovery supports the correct level of trust, governance, and secure action across modern distributed systems.

Discover how discovery is evolving from simply finding information to enabling automated action across AI agents, digital identity systems, and distributed services. This episode explores why capability discovery, metadata, and governance have become essential as software increasingly discovers, selects, and invokes resources on our behalf. Learn how service discovery, Model Context Protocol (MCP), authorization, and trust frameworks shape secure automation. Heather explains why discovery is no longer just a technical lookup, but a critical part of identity, policy, and decision-making in modern digital ecosystems.

Examine the growing challenge of managing the digital lives we accumulate over time. From forgotten accounts and subscriptions to digital estate planning and account recovery, this episode explores how personal identity data becomes increasingly difficult to discover, manage, and access as our online relationships expand. Discover why account discovery, digital inheritance, password managers, and legacy access tools are only partial solutions. This episode highlights the security, privacy, and governance challenges of personal digital identity, and why recovering and understanding our digital footprint may become one of the most important identity management issues of the future.

"In the first post in this series, I framed discovery as a broader systems problem." The challenge is not simply that search engines need to be better. Search is useful for public, indexed information, but discovery reaches much further than that. It is about how people and systems determine what exists, where it lives, whether it is relevant, whether it is usable, and whether it should be visible in the first place.

Heather explores why discovery is a much broader challenge than search, especially in digital identity, information management, and emerging AI ecosystems. Drawing on recent discussions and research, this episode examines how people find, evaluate, and trust information scattered across accounts, platforms, credentials, and services. Learn how information overload, filtering, governance, and AI-powered tools shape modern discovery experiences. This episode highlights the difference between finding information and understanding what is relevant, trustworthy, and accessible, while exploring why discovery has become a critical architecture, trust, and user experience challenge.

Heather explores why appeals and formal objections are not failures in Internet standards development. This episode examines how consensus-based organizations like the W3C and IETF handle serious technical disagreement, why governance processes matter, and how standards groups balance collaboration, transparency, and accountability during difficult decisions. Through practical insights on consensus, formal objections, and appeals processes, Heather explains how working group chairs and contributors can manage conflict constructively. The discussion highlights documentation, procedural fairness, and why structured disagreement can ultimately strengthen digital identity standards, technical governance, and long-term interoperability efforts.

Learn why many organizations struggle to prioritize digital identity, even when identity systems are critical to security, trust, and operations. This episode explores the growing gap between advanced identity industry discussions and the practical realities facing sectors like publishing, healthcare, research, and higher education. Understand how identity architecture, proofing, governance, and reusable credentials are often secondary to operational pressures and business priorities. This episode highlights why successful identity adoption depends on solving immediate problems first, while still building toward stronger long-term identity management and digital trust strategies.

Discover how digital identity wallets and verifiable credentials are moving from theory into real-world infrastructure, even as standards and implementation models remain unsettled. This episode explores the critical distinction between wallets and credentials, and why confusion between them continues to slow meaningful progress. Gain insight into evolving standards, interoperability challenges, and the impact of government regulation on digital identity adoption. This episode highlights why enterprise use cases remain uncertain, how platform providers shape user choice, and why usability, trust, and operational maturity will determine success.

Heather examines why identity systems do not actually make decisions on their own, and how enterprise security outcomes emerge from fragmented, distributed processes. By unpacking how identity, risk, and policy tools interact, this episode reframes modern identity architecture as a complex decision-making environment. Explore how deterministic systems, integration gaps, and inconsistent data interpretation affect access control decisions. This episode highlights why AI and automation increase risk without clear governance, and why organizations must better define decision logic, accountability, and system interactions to ensure consistent, explainable identity and security outcomes.

Heather explores how the AI vendor landscape reveals deeper challenges in fragmented identity systems and enterprise security architecture. By examining how tools function across identity, signals, policy, and enforcement layers, this episode reframes AI not as a feature but as part of a broader decision-making ecosystem. Understand why distributed decision systems create complexity, how probabilistic AI outputs impact governance, and what questions matter when evaluating identity and security tools. This episode highlights the risks of poor integration, the limits of automation, and the importance of designing systems that produce explainable, consistent access decisions.

Breaking the DNS Dependencych-22" class="toc-anchor">ECH’s Catch-22thing-strange-in-the-dns" href="#something-strange-in-the-dns" class="toc-anchor">Something Strange in the DNS use it. That’s the fundamental challenge facing encrypted DNS and Encrypted Client Hello (ECH). These protocols can protect your browsing from prying eyes, but only if you can first obtain the cryptographic configurations that make them work. In places like China, censors have […]

Heather explores what to do after a conference talk is accepted, from reading the speaker agreement to planning travel, using the slide template, and choosing a clear presentation approach. She also explains why focus, rehearsal, and audience fit matter for a strong conference talk. This episode offers practical guidance for conference speakers on preparation, delivery, and event participation. It covers common mistakes to avoid, ways to reduce nerves, and how to make your presentation useful, polished, and easy for audiences to follow.

This episode explores age assurance on the internet, where digital identity, privacy, and policy collide. Heather explains why age verification, age estimation, and age assurance are not the same, and why platforms, regulators, and standards bodies are all converging on this complex problem. Discover how current approaches range from self-reported birth dates to cryptographic credentials and browser-level checks. The episode highlights the trade-offs between accuracy, data minimization, interoperability, and security, and why protecting minors online can reshape identity infrastructure across the web.

Heather Flanagan explores how AI agents are moving from browsing the web to buying on behalf of users, and what that shift means for online payments, identity, and digital trust. The episode examines mandates, delegated authority, liability, and the browser’s evolving role in agentic commerce. It also considers why identity standards, consent, and audit evidence matter as AI shopping becomes more common.

Heather Flanagan explores how AI-enabled browsers challenge the traditional definition of web user agents and what this means for digital identity, web architecture, and standards. As browsers evolve from passive tools to active agents, long-standing assumptions about user representation and control are being tested. This episode examines the implications for user safety, automation, and accountability across the web ecosystem. It highlights emerging questions around transparency, permissions, and governance, offering insight into how standards bodies and developers may need to adapt to ensure browsers continue to prioritize and protect user interests.

Heather Flanagan explores how AI browsers are reshaping the definition of a web user agent, challenging long-standing web architecture principles around user control, consent, and interaction. As AI-driven features evolve from assistance to autonomous action, the browser’s traditional intermediary role begins to shift in subtle but important ways. She examines key questions around delegation, accountability, and intent, including how browsers acting on behalf of users blur the line between human interaction and automation. This discussion highlights why emerging AI capabilities in web browsers demand early attention from digital identity, security, and standards communities.