Crypto-Agility: The Migration You Can't Do at the Last Minute
The post-quantum deadline is not the day quantum computers arrive. It is the day you start, and it depends entirely on how quickly you can change an algorithm.
TOPIC
Fundamentals
The boring bedrock: identity, least privilege, zero trust, patching. The concepts every other security decision quietly depends on.
Articles
OpenID Connect: What a CISO Actually Needs to Know
One corporate login now opens dozens of apps. OpenID Connect is the plumbing. Here is the part of it that becomes your problem, and the questions to ask.
Non-Repudiation: What a Signature Proves, and What It Doesn't
A valid signature is not the same as an undeniable one. Four things have to hold together, and the one that usually fails is key custody.
What Least Privilege Actually Means (and Why Your Admin Count Says Otherwise)
Least privilege is the most quoted and least practiced principle in security. Here's what it really asks of you, and how to start applying it this week.
Key terms
DomainKeys Identified Mail: a domain signs each message and publishes the verifying key in DNS, so a receiver can confirm the message is intact and that a named domain vouched for it.
A DNS policy record at _dmarc that tests whether an SPF or DKIM pass belongs to the domain in the From: header, publishes an enforcement instruction, and requests reports.
The principle that every user, process, and system gets exactly the access it needs to do its job, and nothing more.
The property that someone cannot credibly deny an action they took, because evidence binds that specific person to that specific act.
Cryptographic algorithms designed to resist attack by quantum computers, replacing RSA and ECC before large-scale quantum machines arrive.
Sender Policy Framework: a DNS TXT record listing the servers authorised to send for a domain, checked by the receiver against the connecting server's IP address.
A security model that treats every request as unauthenticated and unauthorized until proven otherwise, regardless of where it comes from.