Archive for Sept 2026


Authentication Is Largely Solved. Authorization Isn't.

My new book, Authorization in Action, is out from Manning. It's about the question that comes after we know who you are: what are you allowed to do, under what conditions, on whose behalf, and in what context? Authentication is largely a solved problem; authorization is not, and AI agents are about to make that gap impossible to ignore.
Continue reading...