Spherical Cow Consulting

Translating geek to human

OAuth Is Asking What Authorization Needs to Become

Learn why OAuth is being pushed to reconsider what authorization needs to become as software grows more autonomous. Heather examines recent OAuth working group discussions around proof of possession, HTTP message signatures, threat models, and the architectural question of where software identity should live.

The episode explores how agentic AI complicates delegated authorization, particularly when multiple software actors, permissions, and contexts are involved. Heather considers whether OAuth needs new extensions or whether some problems belong elsewhere, and why defining clear boundaries may matter more than creating another protocol.

What It’s Actually Like to Serve on the W3C TAG

Heather explores what it’s actually like to serve on the W3C Technical Architecture Group, from reviewing emerging web technologies to navigating architectural questions, consensus, and unfamiliar areas of the web platform. Rather than requiring expertise in every technology, TAG work depends on deep knowledge, curiosity, breadth, and the ability to ask useful questions.

This episode examines how to build toward TAG service through W3C participation, standards work, and cross-domain thinking. Heather also discusses the real commitment involved, including workload, travel, employer support, funding, and the importance of maintaining independence while contributing to web architecture.

The Verifier Has an Interoperability Problem Too

In this episode, Heather examines the gap between technical interoperability and real-world digital identity deployment. Wallets and verifiable credentials may successfully exchange information, but relying parties must navigate different wallets, browsers, operating systems, credential formats, trust models, and failure states.

This episode explores why interoperability must include the full customer experience, not just protocol conformance. Heather considers the growing role of intermediaries, APIs, and verification platforms in absorbing complexity, while asking what happens to trust, privacy, correlation, and governance when another layer enters the identity transaction.

Someone Still Has to Accept the Credential

Discover how digital wallets and verifiable credentials are moving from pilots into real-world adoption, while revealing a critical gap: someone still has to accept the credential. Heather examines the verifier’s perspective, particularly as regulation accelerates digital identity adoption across Europe.

This episode explores why compliance alone is not enough to create meaningful value. Heather considers how credentials could reduce manual review, fraud, data retention, and onboarding friction, while improving customer experience. The key question is simple: when a credential arrives, what old process goes away?

A Field Guide to Identity Conferences: Which One Should You Attend?

Discover how identity conferences can help practitioners stay current on digital identity, emerging standards, regulation, cybersecurity, and the challenges organizations are preparing to solve. Heather examines why choosing the right event matters when budgets, travel, and time are limited, and why there is no single best conference for everyone.

This episode explores how to match conferences to your goals, whether you need enterprise identity insight, European policy perspectives, authentication expertise, or longer-term architectural thinking. Heather also considers what recordings miss: the informal conversations, unexpected connections, and human network that make conference attendance valuable.

Standards Transparency: Public Isn’t the Same as Understandable

Heather examines why making standards information public is not enough to make the work understandable. This episode explores the growing challenge of navigating specifications, document status, provenance, working group activity, and related standards across digital identity, AI, security, privacy, and other overlapping technical domains.

Learn how structured standards data, APIs, and AI tools can make research more efficient without replacing human judgment. Heather explains why better transparency means making process context accessible, so implementers, architects, policymakers, researchers, and analysts can make informed decisions without years of institutional knowledge.

Keeping Up With Standards Without Pretending You Can Keep Up

Heather explores why keeping up with standards development does not mean tracking everything. This episode looks at how a lightweight standards radar can surface emerging work across digital identity, AI, authorization, credentials, and related technologies, while recognizing that new ideas appear far faster than any individual can follow.

Discover how automation, structured public data, and human judgment can work together to identify what deserves closer attention. Heather explains why Internet-Drafts provide signals rather than certainty, how context reveals momentum, and why useful awareness—not perfect completeness—is the more realistic goal.

Staying Useful in a Geopolitical Internet: Reflections from IETF 126

Learn why nation state politics are increasingly shaping technical standards and the future of the Internet. Drawing on reflections from IETF 126, Heather examines how regulatory pressure, geopolitical interests, and competing views of privacy, security, openness, and interoperability can influence standards development and individual contributors.

Explore how to participate thoughtfully when larger forces enter the standards process. Heather considers practical ways to evaluate proposals beyond who submits them, recognize patterns, question architectural assumptions, and protect global interoperability while acknowledging legitimate policy concerns and the real harms the Internet can create.

Technical Standards Were Never Outside Politics

Heather explores why technical standards have never been truly separate from politics, even when they remain nonpartisan. This episode examines how choices around interoperability, privacy, security, and user needs embed values into Internet standards, influencing trust, authority, and the relationships between people, institutions, and technology.

Learn how standards bodies navigate issues such as end-to-end encryption, age assurance, surveillance, and global interoperability without becoming legislatures. Heather explains why making architectural values explicit strengthens technical credibility and helps standards communities respond to the growing pressures of regulation, governance, and digital policy.

Take the Selfie

Heather examines why a simple conference selfie can become one of the most meaningful records of your professional life. Rather than posting for social media, she explores how preserving moments with colleagues, collaborators, and mentors helps capture the relationships that shape careers and strengthen professional communities.

Discover how thoughtful conference etiquette, privacy, and consent fit alongside authentic networking and lasting connections. This episode reflects on memory, digital identity, and the people behind the work, offering a reminder that some of the most valuable professional moments are worth preserving, even if they never become public.