Tagged: #identity

• Acting on a Human's Behalf budding

  A service that calls a backend for a person needs two credentials — and the first must never become the second.

  #security#identity
• MCP Server Authorization budding

  Whether an MCP server needs OAuth at all depends on its transport — and over stdio the spec says it shouldn't have any.

  #security#identity
• Questions to Ask an IdP seedling

  Which identity provider?

  #security#identity#self-hosting
• WebAuthn Credentials Are Domain-Bound budding

  The relying-party ID gets chosen at first deploy, usually without anyone noticing, and it binds harder than the database does.

  #security#identity