kt - DEV Community

kt

Jun 10

gRPC Deep Dive: Stubs, HTTP/2 Frames, and Why Netflix, Spotify, and Mercari Switched

#grpc #microservices #go #http2

20 min read

kt

Jun 9

What xDS Actually Ships: Your Control Plane Sends protobuf, Not YAML

#envoy #istio #kubernetes #grpc

20 min read

kt

Jun 7

xDS Deep Dive, Part 2: Designing What You Ship Over the Universal Data Plane API

#envoy #servicemesh #kubernetes #grpc

32 min read

kt

Jun 6

Why AWS IAM Is So Hard

#aws #iam #security #beginners

15 min read

kt

Jun 3

Transaction Tokens Deep Dive: The OAuth Spec That Carries 'Who, and Why' Across Your Microservices

#oauth #security #microservices #identity

1

11 min read

kt

Jun 3

ID-JAG, Transaction Tokens, WIF: The Three Layers of AI Agent Auth

#oauth #security #ai #agents

1

21 min read

kt

May 31

SPIFFE Compliance Deep Dive

#spiffe #identity #security #workloadidentity

15 min read

kt

May 30

AWS SigV4 and SigV4A Deep Dive

#aws #sigv4 #security #signing

1

14 min read

kt

May 28

AWS IAM Roles Anywhere Deep Dive

#aws #iam #security #authentication

12 min read

kt

May 27

Microsegmentation Deep Dive

#security #zerotrust #networking #kubernetes

14 min read

kt

May 26

AWS IAM Roles Anywhere Hands-On

#aws #iam #sts #security

14 min read

kt

May 24

AWS STS Deep Dive

#aws #sts #iam #security

18 min read

kt

May 18

WORM (Write Once Read Many) Deep Dive

#storage #security #compliance #aws

17 min read

kt

May 18

AWS S3 Deep Dive

#aws #s3 #security #storage

9 min read

kt

May 17

AWS IAM Deep Dive

#aws #iam #security #authentication

9 min read

kt

May 15

AWS Free Hands-On

#aws #tutorial #serverless #beginners

1

16 min read

kt

May 14

AWS Deep Dive

#aws #cloud #security #infrastructure

7 min read

kt

May 10

Introducing Zopa: a 60 KB authorization engine for proxy-wasm, written in Zig

#webassembly #authorization #zig #opensource

8 min read

kt

May 9

What 11 big tech companies actually do with AI in 2026

#ai #productivity #engineering #llm

1

23 min read

kt

May 1

Introducing Omega: SPIFFE Workload Identity + AuthZEN Authorization in a Single Binary

#spiffe #authzen #security #opensource

1

4 min read

kt

Apr 30

Hacking GitHub: From Tag Rewrites to Dangling Commits, Where the Git Protocol Trusts You Without Checking

#security #github #git #supplychain

19 min read

kt

Apr 29

I built chainscope: reading supply chain attacks across 6 surfaces, one slide at a time

#showdev #security #supplychain

7 min read

kt

Apr 29

SLSA Provenance Hands-on: Generate with GitHub Actions, Verify with slsa-verifier

#security #supplychain #slsa #sigstore

11 min read

kt

Apr 28

Why Did Docker Abandon TUF?: A Turbulent History of Container Signing

#security #docker #supplychain #sigstore

2

10 min read

kt

Apr 26

SLSA Deep Dive: Securing the Supply Chain Using Verifiable Levels

#security #supplychain #slsa #openssf

1

12 min read

kt

Apr 22

Sigstore Deep Dive: Unmasking the Magic Behind Keyless Verification

#security #sigstore #kubernetes #devops

18 min read

kt

Apr 20

xDS Deep Dive: Dissecting the "Nervous System" of the Service Mesh

#envoy #servicemesh #kubernetes #istio

10 min read

kt

Apr 19

Why Can We Use "Shorter" Keys?: Key Length vs Security Bits, the Real Story

#todayilearned #security #cryptography #beginners

11 min read

kt

Apr 18

Why I Built awesome-authorization: Mapping the World of Auth Engines onto a Single Page

#showdev #authorization #security #opensource

6 min read

kt

Apr 13

RFC 7523 Deep Dive: JWT Profile

#oauth #jwt #security #authentication

5 min read

kt

Apr 12

RFC 7636 Deep Dive: How PKCE Kills Authorization Code Interception Attacks

#oauth #security #authentication #pkce

7 min read

kt

Apr 11

Why Do SSL/TLS Certificate Lifetimes Keep Getting Shorter?: Everything You Need to Know for the 47-Day Era

#security #tls #devops #pki

1

13 min read

kt

Apr 5

Why I Built opa-authzen-interop: Verifying OPA on AuthZEN Interop

#showdev #opa #authorization #rego

4 min read

kt

Apr 1

I Built an OPA Plugin That Turns It Into an AuthZEN-Compatible PDP

#showdev #opa #authorization #go

1

5 min read

kt

Apr 1

Google Zanzibar Deep Dive: Handling 2 Trillion ACLs in Under 10ms

#authorization #security #architecture #google

3

2

11 min read

kt

Mar 30

AuthZEN Authorization API 1.0 Deep Dive: The Standard API That Separates Authorization Decisions from Enforcement

#oauth #security #authorization #api

2

17 min read

kt

Mar 29

RBAC vs ABAC vs ReBAC: How to Choose and Implement Access Control Models

#authorization #security #architecture #iam

2

15 min read

kt

Mar 24

WIMSE (Workload Identity in Multi System Environments) Deep Dive: Standardizing Identity Authentication for Microservices

#security #microservices #oauth #identity

3

11 min read

kt

Mar 23

GitHub Profile: A "Guest Book" Anyone Can Sign

#showdev #github #python #automation

1

1 min read

kt

Mar 23

OSS License Deep Dive

#opensource #license #github #programming

1

12 min read

kt

Mar 16

ID-JAG Deep Dive

#oauth #security #identity #ai

3

19 min read

kt

Mar 14

Identity Chaining Deep Dive: Connecting Identity Across Trust Domains with OAuth

#oauth #security #identity #microservices

2

3

15 min read

kt

Mar 14

AI Agent Authentication & Authorization Deep Dive: Reading draft-klrc-aiagent-auth-00

#ai #agents #oauth #security

3

2

15 min read

kt

Mar 12

RFC 7521 Deep Dive: Assertion Framework for OAuth 2.0 Client Authentication and Authorization Grants

#oauth #security #authentication

2

8 min read

kt

Mar 9

OpenID Connect Dynamic Client Registration 1.0 Deep Dive: Dynamic Client Registration for Automation and Scale

#oauth #oidc #security #authentication

4

8 min read

kt

Mar 8

brtc (Brute-force Cost): A CLI Tool to Convert Password Strength into "Time to Crack and a Real USD Invoice"

#showdev #security #go #cli

1

6 min read

kt

Mar 7

OpenID Connect Discovery 1.0 Deep Dive: OP's "Self-Introduction" and Dynamic Configuration Retrieval

#oauth #security #authentication #oidc

6

7 min read

kt

Mar 3

RFC 8693 Deep Dive: Token Exchange

#oauth #oidc #security #microservices

8

10 min read

kt

Mar 1

I Just Wanted a Login Form: The "Swamp" of Complexity in the Modern Auth Ecosystem

#showdev #authentication #authorization #security

3

1

2 min read

kt

Mar 1

What Exactly is "Authentication": From the Limits of Passwords to FIDO2, Passkeys, and IdP Architecture

#authentication #security #oidc #fido2

1

8 min read

kt

Feb 28

OpenID Connect Core 1.0 Deep Dive: Understanding the "Authentication" Layer on top of OAuth 2.0

#oauth #security #authentication #oidc

4

15 min read

kt

Feb 26

RFC 8705 Deep Dive: Turning Access Tokens into "Unstealable Tokens" with mTLS

#oauth #security #tls #api

3

1

21 min read

kt

Feb 24

RFC 6750 Deep Dive: How Bearer Tokens Actually Work, Straight from the Spec

#oauth #security #authentication #api

4

10 min read

kt

Feb 23

RFC 6749 Deep Dive: Understanding OAuth 2.0 Design Decisions from the Specification

#oauth #security #authentication #oidc

9

13 min read

kt

Feb 22

Anonymity Technology: The 5 Layers of Defense

#anonymity #privacy #security #tor

3

11 min read

kt

Feb 21

OPA & kube-mgmt Deep Dive

#opa #kubernetes #rego #gatekeeper

13 min read

kt

Feb 17

Is it True That Go Maps Don't Shrink?

#go #memory #performance #backend

1

3

8 min read

kt

Feb 16

Go Heap Fragmentation Deep Dive: The Battle Against 'Invisible Memory' Continues

#go #memory #performance

1

7 min read

kt

Feb 15

Hacker Heuristics: Mental Shortcuts for Surviving a World Without 'Correct' Answers

#showdev #engineering #design #architecture

1

4 min read

kt

Feb 14

Rust Zero-Cost Abstractions Deep Dive

#rust #cpp #compiler #performance

3

4 min read

1 Week Community Wellness Streak

Next.js

Want to connect with kt?