Account recovery without account takeover
Recovery is the weakest door into most accounts. Design rules for a recovery email that helps a locked-out person without handing an attacker a second way in.
Page 2 of 3
All posts
20 articles, newest first.
Workforce identity vs customer identity: what differs
Employees and customers both sign in, but the users, scale, lifecycle and sign-in methods differ. Here is how the two compare and when one platform fits both.
Why every secret key lives in one place
Signing keys, SSH authorities, SAML certificates and sealed secrets belong behind one key service. How envelope encryption and rotation with a grace window work.
Replacing long-lived SSH keys with short-lived certificates
SSH keys copied to servers outlive the people who made them. Certificates signed by a CA expire in minutes, name who may log in and leave a record. How they work.
Step-up authentication: a stronger factor only when it matters
Step-up authentication asks for a stronger or fresher factor only before sensitive actions. Which actions to cover, how fresh a session must be, and how to avoid MFA fatigue.
How this blog runs on Cloudflare Workers
This blog is a Next.js app on Cloudflare Workers with a Strapi CMS. Pages are pre-rendered, cached at the edge and regenerated only when a webhook says content changed.
Keeping identity data in your region
Identity data is personal data. What counts as identity data, how regional planes and a global control plane divide the work, and what may reasonably cross a border.
Designing an audit record you can query
An audit record should answer who did what, on whose behalf, from where and with what outcome. How to design the fields, make it tamper-evident and keep it searchable.
RBAC done properly: roles, bindings and least privilege
Role-based access control decays unless it is maintained. How permissions, roles and bindings fit together, and how to find roles nobody holds or that grant nothing.