kt - DEV Community

kt

Nov 14

OpenID4VCI Deep Dive: 1.0 Final, the Errata, Interactive Authorization in 1.1, and Server-to-Server

#openid #oauth #identity #security

12 min read

kt

Nov 14

DCHP: One CBOR Request for mdoc and SD-JWT VC, In Person and Online

#identity #security #openid #cbor

11 min read

kt

Nov 14

Signing What Was in the Context Window: draft-durga-wimse-ctx-isolation and Its Self-Reported Taint

#ai #security #mcp #identity

10 min read

kt

Nov 14

Zookies Without TrueTime: How SpiceDB, OpenFGA and the Rest Order Their Writes

#authorization #security #database #distributedsystems

13 min read

kt

Nov 14

WIMSE Workload Credentials -03: The WIT Finally Gets a Validation Procedure

#security #identity #jwt #microservices

11 min read

kt

Nov 14

Zanzibar Implementations Compared (Late 2026): SpiceDB, OpenFGA, Permify, Keto, Topaz, Warrant

#authorization #security #architecture #opensource

12 min read

kt

Nov 14

SD-JWT VC Deep Dive: vct, Issuer Keys, Type Metadata, and the URLs a Credential Makes You Fetch

#oauth #security #identity #jwt

14 min read

kt

Nov 14

WIMSE HTTP Signatures Deep Dive: Proof of Possession That Survives the Load Balancer

#security #identity #microservices #cryptography

10 min read

kt

Nov 14

identity-deep-dive: A Weekly Briefing and a Sourced Spec Map for OAuth, WIMSE, and OpenID

#showdev #oauth #security #identity

5 min read

kt

Nov 14

wtfe: Claims About Engineering Culture by Country, Each One Sourced and Rated

#showdev #career #culture #astro

4 min read

kt

Nov 14

Lettering Programming Comics in Japanese, Only Where the License Allows It

#showdev #astro #opensource #japanese

5 min read

kt

Nov 14

wtfi3: Who Is Talking to Whom on My WiFi

#showdev #go #networking #privacy

4 min read

kt

Nov 14

wtfi2: Find the Hop Where Your Wi-Fi Connection Actually Dies

#showdev #rust #networking #cli

4 min read

kt

Nov 14

The Zanzibar Paper, Side by Side With Eight Translations

#showdev #authorization #translation #astro

3 min read

kt

Nov 14

Why Hackers Don't Get Caught: A Sourced Visual Explainer, Layer by Layer

#showdev #security #privacy #tor

5 min read

kt

Nov 14

I Already Had a VHS Tape for Every README GIF. matinee Turns It Into a Narrated Video.

#showdev #cli #terminal #video

4 min read

kt

Nov 14

whosent: A TUI That Shows Who Sent the Agent

#showdev #go #security #oauth

5 min read

kt

Nov 14

prpr, a Terminal List of Every Open GitHub Pull Request I Can See

#showdev #github #go #tui

3 min read

kt

Nov 14

I Put Up a php2shell Page Before PHP's Fix Landed. There Is No Exploit on It.

#showdev #php #security #webdev

4 min read

kt

Nov 14

Disk Viewers Show Sizes. I Wanted One That Says Who Put the Bytes There.

#showdev #go #macos #cli

5 min read

kt

Nov 14

trust-me-bro: Reading an Agent Skill Before It Reads Your .env

#showdev #security #ai #mcp

6 min read

kt

Nov 14

S3 Atlas, Everything I Know About Amazon S3 on One Site

#showdev #aws #s3 #storage

3 min read

kt

Nov 14

goi: Japanese Words People Know but Rarely Say, Each With Its Sources

#showdev #japanese #astro #webdev

3 min read

kt

Nov 14

I Log Every Movie I Watch as a Markdown File, Filed Through GitHub Issues

#showdev #react #githubactions #movies

4 min read

kt

Nov 14

mcp-opa-authz: Authorization Answers for Coding Agents, from the Policy Instead of a Guess

#showdev #mcp #opa #authorization

5 min read

kt

Nov 14

howbad: What a Prompt-Injected Coding Agent Could Do With the Credentials on Your Machine

#showdev #security #ai #go

5 min read

kt

Nov 14

A Repo That Makes Claude Correct My English Instead of Writing It

#showdev #claude #english #learning

5 min read

kt

Nov 14

aws-credentials: STS and SigV4 as a Site You Can Click Through

#showdev #aws #security #iam

4 min read

kt

Nov 14

a2claude Is Now a2acode: Any ACP Coding Agent Behind A2A

#showdev #ai #agents #python

5 min read

kt

Nov 14

AWS Connectivity: Every Road From Your Network Into AWS, on One Map

#showdev #aws #networking #cloud

6 min read

kt

Nov 14

ccretro: A Monthly Claude Code Retro That Checks Last Month's Suggestions

#showdev #ai #claude #productivity

5 min read

kt

Nov 4

What Coding Agents Leave in Public Git Repos

#ai #git #privacy #security

2

3 min read

kt

Nov 4

Secret Scanners Look for Credentials. I Wanted One That Looks for Me.

#showdev #git #privacy #security

3 min read

kt

Oct 27

Ransomware in Japan: 61 of 92 Known Entry Points in 2025 Were VPN Appliances

#showdev #security #ransomware #vpn

4 min read

kt

Sep 16

Mandatum: Making an AI Agent's Authority a Chain You Can Verify

#showdev #go #security #authorization

1

5 min read

kt

Sep 12

I Made Four Authorization Engines Answer the Same Questions

#showdev #authorization #security #webassembly

1

3 min read

kt

Aug 14

Envoy AI Gateway: A Hands-On Tour You Can Run Before Touching Kubernetes

#ai #kubernetes #envoy #llm

28 min read

kt

Aug 13

Let's Play Shogi: I Turned My GitHub Profile README Into a Playable Board

#showdev #github #python #automation

5 min read

kt

Jun 28

Mapping MCP, A2A, and ACP: Telling AI Agent Protocols Apart in 2026

#ai #agents #mcp #a2a

1

12 min read

kt

Jun 26

The Day client_id Becomes a URL: Client ID Metadata Documents vs Dynamic Client Registration (DCR)

#oauth #security #identity #mcp

1

15 min read

kt

Jun 25

AgentAuth Deep Dive: Reading the Self-Authenticating UUID for AI Agents from the Source

#ai #security #mcp #typescript

14 min read

kt

Jun 15

JWT (Access Token) vs X.509 Deep Dive: How to Choose What You Present as a Credential

#security #authentication #jwt #tls

10 min read

kt

Jun 14

a2claude: Turn Claude Code Into a Server Other AI Agents Can Call

#showdev #ai #agents #python

9 min read

kt

Jun 13

A2A Protocol Auth, Taken Apart: Why the Spec Is Thin and Where That Leaves Holes

#ai #agents #security #oauth

17 min read

kt

Jun 10

gRPC Deep Dive: Stubs, HTTP/2 Frames, and Why Netflix, Spotify, and Mercari Switched

#grpc #microservices #go #http2

20 min read

kt

Jun 9

What xDS Actually Ships: Your Control Plane Sends protobuf, Not YAML

#envoy #istio #kubernetes #grpc

20 min read

kt

Jun 7

xDS Deep Dive, Part 2: Designing What You Ship Over the Universal Data Plane API

#envoy #servicemesh #kubernetes #grpc

32 min read

kt

Jun 6

Why AWS IAM Is So Hard

#aws #iam #security #beginners

15 min read

kt

Jun 3

Transaction Tokens Deep Dive: The OAuth Spec That Carries 'Who, and Why' Across Your Microservices

#oauth #security #microservices #identity

1

11 min read

kt

Jun 3

ID-JAG, Transaction Tokens, WIF: The Three Layers of AI Agent Auth

#oauth #security #ai #agents

2

1

21 min read

kt

May 31

SPIFFE Compliance Deep Dive

#spiffe #identity #security #workloadidentity

15 min read

kt

May 30

AWS SigV4 and SigV4A Deep Dive

#aws #sigv4 #security #signing

1

14 min read

kt

May 28

AWS IAM Roles Anywhere Deep Dive

#aws #iam #security #authentication

12 min read

kt

May 27

Microsegmentation Deep Dive

#security #zerotrust #networking #kubernetes

14 min read

kt

May 26

AWS IAM Roles Anywhere Hands-On

#aws #iam #sts #security

1

14 min read

kt

May 24

AWS STS Deep Dive

#aws #sts #iam #security

18 min read

kt

May 18

WORM (Write Once Read Many) Deep Dive

#storage #security #compliance #aws

17 min read

kt

May 18

AWS S3 Deep Dive

#aws #s3 #security #storage

9 min read

kt

May 17

AWS IAM Deep Dive

#aws #iam #security #authentication

1

9 min read

kt

May 15

AWS Free Hands-On

#aws #tutorial #serverless #beginners

3

16 min read

1 Week Community Wellness Streak

Next.js

Want to connect with kt?