Viewing profile — sandij

Another issue with non-repudiation of presentation is that it encourages relying parties to log full transcripts of presentation interactions. It could also encourage supervisory b…

Non-repudiation of commitments to a transaction can be good when both parties want to avoid later disputes about the authenticity of these commitments. It requires careful design o…

I’m not sure what the German eID uses today, but the German architecture team has explored KEM+MAC for the EU Digital Identity Wallet. Maybe its eID is similar. You can apply KEM+M…

To prove that the car rental company has seen the driver licence, they just need to show the judge a copy of the licence which is e-sealed by its issuing authority. No need to incl…

This article is very relevant in the context of the EU Digital Identity Wallet, and digital credentials in general, such as ISO/IEC 18013-5 mobile driver licenses and other mdocs. …

I was curious what would be needed to apply Web Authentication for message/document signatures that third parties can verify. This is an article/demo I wrote about what my findings…

Cleverbase, Vidua | https://cleverbase.com | The Hague, the Netherlands, hybrid options | iOS / Android native mobile app engineer We deliver identity wallets and trust services. U…

And video here: https://docs.datomic.com/cloud/other-tools/REBL.html

Go has an excellent standard library for cryptography primitives with well-established best practices. It was designed and is maintained in a principled way that likely appeals to …

It also reminds me (in a positive way) of Étoilé which seems to not be developed anymore, but had a similar Mac OS / NeXTStep inspired approach to design: http://etoileos.com/

This software design classic has been hard to obtain lately. Co-author Rebecca Wirfs-Brock announced yesterday that it has been re-published now as a free download: https://twitter…

Not yet. What aspect would be interesting for you to read more about?

Currently we are with between 50 and 100 in total, the team in this example is with 9. We are building inherently complex systems with high compliance and security impact. So all c…

We use a combination of Markdown + PlantUML, CSV, YAML, Structurizr DSL, and Gherkin feature files under Git version control next to the code to structure the requirements and exam…

Any experiences with intentionally hostile software architecture? Curious how for example code project structure or inter-process messaging constraints can prohibit mixing concerns…

A start: https://joearms.github.io/#2018-12-26%20Fun%20with%20the%20T...

When pinning CAs instead of certificates, you’d use CAA instead of HPKP.

Not sure it meets all 3 requirements, but last time I tried I was rather impressed by the Nightcode Clojure IDE built with JavaFX: https://sekao.net/nightcode/

"We don't condemn the server operator for being at the mercy of nonfree software, and we certainly don't boycott her for this. Rather, we are concerned for her freedom, as with any…

An easy way is to use an IMAP client like the macOS Mail.app that syncs raw email + metadata in .mbox format. You can find the files in ~/Library/Mail/V4. Combine with Time Machine…