(Spoiler Alert: the answer might be “both”!) This is a slightly technical article trying to capture how two different types of authentication mechanisms, federated login and passkeys, compare. Despite how similar they might look to the user because of the design of the login page, they are ultimately quite different things! When websites require you… Continue reading Comparing Federated Logins and Passkeys: Which One Fits Your Needs?
Authorization is growing as the next big thing. I want to understand why, and writing about it is how I get there from here.
Hosting a successful meeting requires preparation, good facilitation, time to absorb material, and a clear post-meeting report.
Time for Heather's favorite tips to staying organized in a busy freelancing world.
There is more to communication than just the correct use of words, phrases, and clauses. Let's look at some of the communication skills that don't get enough attention.
For the last three months, I've been working on a white paper, "Government-issued Credentials and the Privacy Landscape." This paper aims to inspire thought and provoke useful conversations about enhancing online privacy between people setting privacy laws and regulations and people writing technical standards. The paper is still a Work In Progress, though realistically speaking,… Continue reading Navigating the Intersection of Privacy Laws and Technical Standards
The technology that supports digital identity is like magic. A quick scan of your face and you can open your phone or get on a plane. But what happens when the promise of technology falls short for significant segments of the population? This is top of mind because of the newly proposed NIST 800-63 rev 4… Continue reading NIST 800-63-4 and Equity
Getting started often seems to be one of the biggest blockers to writing (the other is actually finishing). I usually write 2-3 blog posts a week for myself and my clients, but it's not like the idea springs forth fully formed and perfect! Here's what my writing process looks like using last week's blog post on personal accountability as an example.
Last week, I talked about a few of the challenges with the language around privacy. That kicked off an excellent conversation on social media and via email. It also made me think about another topic that I find challenging to talk about: biometrics. Dictionary.com defines biometrics as: the process by which a person's unique physical and… Continue reading Bemused about Biometrics
Privacy is a particularly thorny topic. The concept is always contextually defined, and it does not get easier when different concepts—anonymity, confidentiality, secrecy, and security—are regularly conflated with privacy. Read on...