Towards a standard for bearer token URLs – Neil Madden

In XSS doesn't have to be Game Over, and earlier when discussing Can you ever (safely) include credentials in a URL?, I raised the possibility of standardising a new URL scheme that safely allows encoding a bearer token into a URL. This makes it more convenient to use lots of very fine-grained tokens rather than one…

Courses for APIs: API Expert - Skillsoft

PDF] Synthetic Initialization Vector (SIV) Authenticated Encryption Using the Advanced Encryption Standard (AES)

GitHub - lamw/vmworld2021-session-urls

API security – Neil Madden

When and Why Would I use Oauth2?

When and Why Would I use Oauth2?

Cryptography FM Podcast on Spotify

web-security – Neil Madden

Banking Crisis Raises Concerns About Hidden Leverage in the System - BNN Bloomberg