What It’s Actually Like to Serve on the W3C TAG

The Verifier Has an Interoperability Problem Too

Someone Still Has to Accept the Credential

A Field Guide to Identity Conferences: Which One Should You Attend?

Standards Transparency: Public Isn’t the Same as Understandable

Keeping Up With Standards Without Pretending You Can Keep Up

Why Identity Governance Is Expanding Beyond Identity

Web Authentication API (WebAuthn) Level 3

Staying Useful in a Geopolitical Internet: Reflections from IETF 126

Technical Standards Were Never Outside Politics

A Digital Identity Digest

Take the Selfie

How to Research a Defensible Paper Without Drowning in Sources

The Identity Salon: Five-Year Problems, Chatham House Notes, and DNS Nonsense

Sun spotlights a classic scene on the Sound

Spherical Cow ConsultingSpherical Cow ConsultingGovernance Means Something. Just Not Always the Same Thing.When Process Stops Protecting the WorkChoosing a Discovery Mechanism Is the Hard PartWhen Discovery Starts Taking ActionThe Digital Life We Forgot We HadIdentity Discovery Is More Than Finding the Login ButtonThe Discovery Problem Is Bigger Than SearchAppeals Are Not FailuresIdentity Is Not the ProductWallets and Credentials Are Here. Maturity Is Not.Identity Systems Don’t Make DecisionsWhat the AI Vendor Landscape Reveals About Fragmented Identity SystemsMy Talk Was Accepted — Now What? A Practical Guide for Conference SpeakersAge Assurance on the Internet: Identity, Privacy, and the Limits of VerificationWhen AI Agents Start Shopping: The Emerging Architecture of Agentic CommerceAI Browsers and the Web User Agent: What Might Need to Change?When Browsers Start Acting for You: AI Browsers and the Definition of a Web User AgentMaking Sense of ISO, IEC, and the Standards MazeHow NOT to Get Your Conference Submission BinnedDesigning Digital Wallets for Reality: Where Selective Disclosure and ZKPs FitWhat Makes a Successful Standard?Understanding the FIDO Alliance’s Standards and Working GroupsContributor Skills: How Standards Are CreatedInternet Shutdowns and the Reality of a Fragmented InternetInside the OpenID DCP Working Group: Issuance, Presentation, and RealityThe AI System That Never WasA Field Guide to Digital Identity Standards BodiesProcess, Standards, and the AI Rogue Wave: Notes from Gartner IAMICYMI 2025: What You All Read the Most This YearWeb Payments and Digital Identity Standards Are Converging – #TILTwo APIs Walk Into a Browser: FedCM vs. the DC APIWhat I Wish I Knew When I Started in IdentityRobots, Humans, and the Edges of the Open WebDigital Identity Wallet Standards, the DC API, and PoliticsThe Regulator’s DilemmaThe Paradox of ProtectionThe Infrastructure We Forgot We BuiltCan Standards Survive Trade Wars and Sovereignty Battles?The People Problem: How Demographics Decide the Future of the InternetWhy Tech Supply Chains, Not Protocols, Set the Limits on AI and the InternetThe End of the Global InternetDelegation and Consent: Who Actually Benefits?Pirates, Librarians, and Standards DevelopmentWho Really Pays When AI Agents Run Wild? Incentives, Identity, and the Hidden BillAI Permissions vs. Human Permissions: What Really Changes?Roads, Robots, and Responsibility: Why Agentic AI Needs Identity InfrastructureBot or Not? Why Incentives Matter More Than IdentityWorking Group Chair Skills: Standards Work Isn’t Just for CodersAgentic AI in the Open Standards Community: Standards Work or Just Hype?Not Just a Technical Problem: Why Fighting Disinformation Needs Resilient InfrastructureWhat WSIS+20 Taught Me About Digital Identity and Global GovernanceKill the Wallet? Rethinking the Metaphors Behind Digital IdentityLocal Flavors, Global Reach: Why Digital Identity Needs Cultural ContextWhen Verification Calls Home: Three Views on Privacy, Risk, and Digital CredentialsResilience Isn’t Free: What Standards Can (and Can’t) Prepare Us ForDelegation in a Multi-Actor World: It’s Not Just OAuth AnymoreRethinking Digital Identity: What ARE Open Standards?The MCP BandwagonActing on Behalf of Others: Delegation, Consent, and Messy RealityWhy Governance Decides If Decentralization WorksRedefining Success: Centralization as a Feature or a Failure?The Cost of Decentralization: What Companies Need to Weigh Before They CommitEngineering Meets Economics: Shifting, Not Choosing, Between Centralized and DecentralizedTrailerWeb Payments and Digital Identity are Having a MomentWho Owns the Bots? Rethinking Governance for Non-Human IdentitiesIs Introspection a Bug or a Feature?The Future of Open Standards: Politics, Sovereignty, and the Role of SDOsThe Boundaries Between Standards and Policy: AI Training as a Case StudyWhy Enterprises Should Care About Digital Credentials (Even If It’s Complicated)Digital Credentials vs. Traditional Federation: What’s the Difference?Standards vs. Reality: The Long Tail of Legacy SystemsShared Signals: Who Pays the Price for Stronger Identity?What AI Agents Can Teach Us About Fraud in Consumer IdentityZero-Knowledge Proofs: Privacy, Innovation, and EquityAgentic AI and Authentication: Exploring Some Unanswered QuestionsSecuring the Software Supply Chain: How SCITT, SPIFFE, and WIMSE Work TogetherAre You Human? A Dive Into the Proof of Personhood DebateDigital Credentials That Can Be Verified: A Lesson in TerminologyUnderstanding NHIs: Key Differences Between Human and Non-Human IdentitiesUnlock the Secrets of OAuth 2.0 Tokens (and Have Fun Doing It!)The Importance of Early Engagement in StandardsEvery Company is an IAM CompanyRethinking Identity Management: The Role of Non-Human Identities in Academic ResearchThe Importance of Digital Identity Wallet StandardsOperationalizing Trust Frameworks: Who’s Going to Keep the Lights On?The Wallets Are Coming – But Are We Ready for What’s Next?From Concept to Consensus: Developing Internet StandardsWhy FIPS 140-3 Matters for Cryptography and Digital Identity SecurityPrivacy-Enhancing Technologies: Protecting Human and Non-Human IdentitiesDigital Identity in the Age of AI: Challenges and OpportunitiesIAM’s Time Problem: Why Digital Attestation Needs WorkFedCM: The Tightrope Walk of Developing a SpecificationIntroducing Digital Identity Standards Development Service for ExecutivesPreparing for the Quantum Shift in CybersecurityThe EU Digital Identity Architecture Reference Framework – How to Get There From HereWhat is the W3C WICG Digital Credentials API?Privacy and Personalization on the Web: Striking the BalanceThe Evolving Landscape of Non-Human IdentityA Cookieless Horizon: Navigating Browser ChangesUnderstanding Browser Tracking & Logins: The Invisible TrailThe Evolution of MFA: Beyond SMS and Email Navigating the Passwordless Future: Enhancing Digital SecurityMore on the Options and Diversity of Verifiable CredentialsVerifiable Credentials vs mdocs: A Comparative AnalysisSSI: More than just BlockchainFederated Identity and SSI – YMMVStandards, Browsers, and Identity WalletsComparing Federated Logins and Passkeys: Which One Fits Your Needs?Authorization – the Next Big ThingHosting a Successful MeetingHow to Stay Organized: Tips for Entrepreneurs, Freelancers, and ConsultantsCommunication as a Critical Business SkillNavigating the Intersection of Privacy Laws and Technical StandardsNIST 800-63-4 and EquityThe Writing ProcessBemused about BiometricsPedantic About PrivacyResolutions for 2023Freelancing Advice for the HolidaysCan AI Write This Blog Post?When Gravity Takes OverThis Is Your Brain On Identity“Why don’t they just quit?”It’s a Wrap!Index Cards – They Never Go Out of StyleEmbracing the UncomfortableCan a Freelancer Have a Side Gig?You Don’t Have To Be Good At EverythingWhere Did All the Energy Go?But There’s No PressureBe Brave. Say No.The Gaps Are Where Life Gets InterestingThe Power of the OutlinePublic Speaking Tips for Virtual ConferencesSuccession Planning in ConsultingThe Case of the Unclear AntecedentIndex: What’s it like to be a …?A World of Only CarrotsOpen-source ProjectsWhen Words Do Not Mean What You Think They MeanBias, Meritocracy, and Human NatureWFH – everything I hoped it would be (almost)Publishing – it’s character-building!Get Inside Their HeadsRemote Project Management 101Surviving Business TravelHuman NetworkingThe Meaning Behind Meeting MinutesMaking DecisionsProject Management and the Art of Herding CatsTweet Jamming: The Fun Inherent in AsynchronicityIt Takes All Kinds – Freelancing for a Living

Governance Means Something. Just Not Always the Same Thing.

When Process Stops Protecting the Work

Choosing a Discovery Mechanism Is the Hard Part

When Discovery Starts Taking Action

The Digital Life We Forgot We Had

Identity Discovery Is More Than Finding the Login Button

The Discovery Problem Is Bigger Than Search

Appeals Are Not Failures

Identity Is Not the Product

Wallets and Credentials Are Here. Maturity Is Not.

Identity Systems Don’t Make Decisions

What the AI Vendor Landscape Reveals About Fragmented Identity Systems

Distributing the Keys for Private Access to the Web

My Talk Was Accepted — Now What? A Practical Guide for Conference Speakers

Age Assurance on the Internet: Identity, Privacy, and the Limits of Verification

@teachprivacy.bsky.social on Bluesky