February 2026
The Case For Universal Login and "Off-Protocol" Services - > The case I want to make today is that having different kinds of service providers other than the P...
OAuth 2.0 JWT Authorization Grant with DPoP Binding - > This specification extends the proof-of-possession concept to the authorization grant itself. It d...
Trusting Trust in the Fediverse - > We've reached the point of defederating instances deemed bad and trying to intentionally prevent t...
Deep Dive into Wafrn: How One Platform Self-Hosts Both ActivityPub and Bluesky Identities - > Wafrn does something more ambitious: it implements both natively, in the same codebase, with a uni...