March 2026
- We Built It With Slide Rules. Then We Forgot How.
My father grew up on a subsistence farm, the kind that raised chickens and grew just enough to get by. Farmers were the original hackers. You couldn't wait for the right tool or the right expert. You fixed what was…
- The WebPKI and Client Authentication Are at a Crossroads
The CA/Browser Forum is having its first serious conversation about whether publicly trusted client authentication certificates deserve their own Baseline Requirements. Nick France kicked off the discussion on the public…
- Introducing the WebPKI Observatory
For as long as I have been in this industry, the WebPKI compliance conversation has run on impressions. People with long memories and regular conference attendance have built up a picture of which CAs are well-run, which…
- Signed, Auditable, Offline-Tolerant, PQ Secure QR Codes
Signed, Auditable, Offline-Tolerant, PQ Secure QR Codes
- When Compliance Records Become the Only Honest Signal
I've been spending a lot of time lately building Systematic Reasoning with my long-time friend Vishal. The core premise is straightforward. Organizations reveal their true operational character through how they design to…