The Curious Engineer

All blogs / Security

Phil Windley's Technometria

windley.com

Building the Internet of My Things

SecurityDistributed systems / cloudSoftware / engineering practice

’05’10’15’20’25
Posts
4,360 from 1 May 2002 to 29 Oct 2026
Posting
weekly (41 in the last year)
Kind
personal blog
Feed
https://www.windley.com/rss.xml

Latest

October 2026

  1. Identity Enables Autonomy
  2. Pico Engine 1.8 Is for Builders
  3. Closures, Objects, Actors, and Picos
  4. Moving Picos from Mesh to Mesh

September 2026

  1. Human in the Loop Control for OpenClaw
  2. Moving My Sensor Network onto Manifold
  3. Software-Defined Three-Way Switch
  4. There's a Personal App for That
  5. Authentication Is Largely Solved. Authorization Isn't.
  6. Why Not SPIFFE for Pico Identity?

August 2026

  1. Pico-to-Pico Identity Arrives
  2. The Pressure Behind Identity's Diseconomies of Scale
  3. A map of the manifold environment.shtml
  4. Using home assistant with manifold.shtml

July 2026

  1. Identity for the pico engine.shtml
  2. The shape of context in agentic authorization.shtml

June 2026

  1. Ai integration in picos starts with events.shtml
  2. Internet identity workshop xlii report.shtml
  3. Manifold api and sensor network two new repos.shtml

May 2026

  1. Enhance duplicate or replace none of the above.shtml

April 2026

  1. Building a conversational interface for manifold with mcp and picos.shtml
  2. Data protection missed the point loyalty gets it right.shtml
  3. Myterms and sedis duty of loyalty.shtml

March 2026

  1. A legal identity foundation isnt optional.shtml
  2. Agentic ai and dynamic authorization a series recap.shtml
  3. Cross domain delegation in a society of agents.shtml
  4. Delegation as data applying cedar policies to openclaw subagents.shtml
  5. Fix identity first.shtml
  6. Its not just what agents can doits when they can do it.shtml

February 2026

  1. A policy aware agent loop with cedar and openclaw.shtml
  2. Beyond denial using policy constraints to guide openclaw planning.shtml
  3. Childproofing the control plane using cedar to build frontal lobes for agentic systems.shtml
  4. Sedi and client side identity.shtml
  5. Why authorization is the hard problem in agentic ai.shtml

January 2026

  1. Authorization before retrieval making rag safe by construction.shtml
  2. From architecture to accountability how ai helps policy become practice.shtml

December 2025

  1. Ai is not your policy engine and thats a good thing.shtml
  2. Policy authoring and analysis with ai.shtml
  3. What ai can tell you about your authorization policies.shtml

November 2025

  1. Internet identity workshop xli report.shtml
  2. The first agentic internet workshop.shtml

October 2025

  1. Visa isnt centralizedmdashand neither is first person identity.shtml

September 2025

  1. Early access to dynamic authorization.shtml
  2. From iiw to the agentic internet workshop.shtml

July 2025

  1. Components for web apps.shtml

June 2025

  1. Lets stop phoning home.shtml

May 2025

  1. Leaving aws.shtml

April 2025

  1. Establishing first person digital trust.shtml
  2. First person identity.shtml
  3. Internet identity workshop xl report.shtml
  4. Long live rss.shtml
  5. What iiw participants value most.shtml
  6. Why do policy languages feel so hard.shtml
  7. Zero trust least privilege and just in time access.shtml

February 2025

  1. The business case for dynamic authorization.shtml

January 2025

  1. Authorization matters.shtml

November 2024

  1. Internet identity workshop xxxix report.shtml

October 2024

  1. Is voting secure.shtml

September 2024

  1. Digital identity and access control.shtml

June 2024

  1. Decentralized identity comes of age.shtml
  2. What is decentralized identity.shtml

May 2024

  1. Can llms provide references for their work an experiment.shtml

April 2024

  1. Internet identity workshop xxxviii report.shtml
  2. Relationships are entangled.shtml
  3. Using x509 certs for did provenance.shtml
  4. Web 20 is collapsing under its own weight.shtml

March 2024

  1. Decentralizing energy.shtml

February 2024

  1. Acceptance networks for self sovereign identity.shtml
  2. Identity metasystems and lessons from building the sovrin foundation.shtml
  3. Zero trust with zero data.shtml

November 2023

  1. Cloudless computing at the edge.shtml
  2. Dapps are about control not blockchains.shtml
  3. Permissionless and one to one.shtml
  4. Ssi is the key to claiming ownership in an ai enabled world.shtml

October 2023

  1. Internet identity workshop 37 report.shtml
  2. Zero data.shtml

September 2023

  1. Digital identity podcasts.shtml

August 2023

  1. Zero trust.shtml

June 2023

  1. Rule based programming and the internet of things.shtml
  2. Using amazon cognito tokens for fine grained access control.shtml

May 2023

  1. Internet identity workshop 36 report.shtml
  2. Streaming trust.shtml

April 2023

  1. Minimal vs fully qualified access requests.shtml
  2. Oauth and fine grained access control.shtml

March 2023

  1. Learning digital identity podcasts.shtml
  2. Monitoring temperatures in a remote pump house using lorawan.shtml
  3. Not all pbac is abac access management patterns.shtml
  4. Passkeys using fido for secure and easy authentication.shtml
  5. Why doesnt this exist already.shtml

January 2023

  1. Better onboarding with verifiable credentials.shtml
  2. Defining digital identity.shtml
  3. Ssi doesnt mean accounts are going away.shtml

December 2022

  1. Wallets and agents.shtml

November 2022

  1. A healthcare utopia of rules.shtml
  2. The nature of identity.shtml
  3. Verifying twitter.shtml

October 2022

  1. Using openid4vc for credential exchange.shtml

September 2022

  1. A new job at aws.shtml

August 2022

  1. Ondc an open network for ecommerce.shtml
  2. The path to redemption remembering craig burton.shtml

July 2022

  1. Decentralized systems dont care.shtml
  2. The most inventive thing ive done.shtml

June 2022

  1. Fixing web login.shtml
  2. Transferable accounts putting passengers at risk.shtml

May 2022

  1. Decentralizing agendas and decisions.shtml
  2. Is an apple watch enough.shtml
  3. Twenty years of blogging.shtml
  4. Using a theory of justice to build a better web3.shtml

April 2022

  1. Easier iot deployments with lorawan and helium.shtml
  2. John oliver on surveillance capitalism.shtml
  3. We need a self sovereign model for iot.shtml

March 2022

  1. Are transactional relationships enough.shtml
  2. Privacy authenticity and confidentiality.shtml
  3. Provisional authenticity and functional privacy.shtml
  4. The ukrainian war pki and censorship.shtml
  5. What is privacy.shtml

February 2022

  1. A defacto national id from idme.shtml
  2. Framing and self sovereignty in web3.shtml
  3. Life is a metasystem.shtml
  4. Web3 self sovereign authority and self certifying protocols.shtml

January 2022

  1. Irs using facial scanning.shtml
  2. Web3 and digital embodiment.shtml
  3. Web3 coherence and platform sovereignty.shtml

December 2021

  1. In memory of kim cameron.shtml
  2. Leveraging the identity metasystem.shtml

November 2021

  1. Digital memories.shtml
  2. Identity and consistent user experience.shtml
  3. Picos at the edge.shtml
  4. Zero knowledge proofs.shtml

October 2021

  1. Nfts verifiable credentials and picos.shtml
  2. Token based identity.shtml
  3. Ugh theres an app for that.shtml

September 2021

  1. Fluid multi pseudonymity.shtml
  2. Json is robot barf.shtml
  3. Toothbrush identity.shtml

August 2021

  1. Clean sheets and strategy.shtml
  2. Ephemeral relationships.shtml
  3. Life will find a way.shtml
  4. Seeing like the tsa.shtml
  5. Smart property.shtml

July 2021

  1. Alternatives to the compuserve of things.shtml
  2. Ten reasons to use picos for your next decentralized programming project.shtml

June 2021

  1. Building an ssi ecosystem health passes and the design of an ecosystem of ecosystems.shtml
  2. Building an ssi ecosystem memberpass and credit unions.shtml
  3. Reciprocal negotiated accountability.shtml
  4. Ssi interaction patterns.shtml
  5. The self sovereign internet.shtml

May 2021

  1. Building an ssi ecosystem digital staff passports at the nhs.shtml
  2. Can the digital future be our home.shtml
  3. Comparing x509 certificates with ssi.shtml

Every year

2026 362025 202024 142023 222022 312021 362020 232019 122018 152017 262016 412015 302014 382013 592012 762011 812010 1262009 1322008 3072007 5572006 5432005 5852004 6142003 6152002 321