Torsten Lodderstedt’s Post

June 10 & 12, join the OpenWallet Foundation, SPRIND and MATTR for a two-part workshop: Technical Standards Underpinning ARF (please note - you must register for each session individually) Monday June 10 - Part 1: OpenID4VP This webinar will give an overview of one of the technical standards that underpin EUDIW ARF: OpenID4VP, which defines a protocol for requesting and presenting Digital Credentials. The focus will be on the technical details and timelines, and answering questions from the participants/implementers. Registration: https://hubs.la/Q02y-vTL0 Wednesday June 12 - Part 2: OpenID4VCI This webinar will give an overview of one of the technical standards that underpin EUDIW ARF: OpenID4VCI, which defines an API for the issuance of Digital Credentials. The focus will be on the technical details and timelines, and answering questions from the participants/implementers. Registration: https://hubs.la/Q02y-kJ_0 Thanks to our presenters Kristina Yasuda (SPRIND) and Oliver Tebru (MATTR) for presenting these sessions. #OIDC4VC #OIDC4VP #OIDC #OpenWallet #OpenSource #identity #VerifiableCredentials

NEXT MONDAY / WEDNESDAY: Join the OpenWallet Foundation, SPRIND and MATTR for a two-part workshop: Technical Standards Underpinning ARF (please note - you must register for each session individually) Monday June 10 - Part 1: OpenID4VP This webinar will give an overview of one of the technical standards that underpin EUDIW ARF: OpenID4VP, which defines a protocol for requesting and presenting Digital Credentials. The focus will be on the technical details and timelines, and answering questions from the participants/implementers. Registration: https://hubs.la/Q02zHqSB0 Wednesday June 12 - Part 2: OpenID4VCI This webinar will give an overview of one of the technical standards that underpin EUDIW ARF: OpenID4VCI, which defines an API for the issuance of Digital Credentials. The focus will be on the technical details and timelines, and answering questions from the participants/implementers. Registration: https://hubs.la/Q02zHpm-0 Thanks to our presenters Kristina Yasuda (SPRIND) and Oliver Tebru (MATTR) for presenting these sessions. #OIDC4VC #OIDC4VP #OIDC #OpenWallet #OpenSource #identity #VerifiableCredentials

IN TWO WEEKS: Join the OpenWallet Foundation, SPRIND and MATTR for a two-part workshop: Technical Standards Underpinning ARF (please note - you must register for each session individually) Monday June 10 - Part 1: OpenID4VP This webinar will give an overview of one of the technical standards that underpin EUDIW ARF: OpenID4VP, which defines a protocol for requesting and presenting Digital Credentials. The focus will be on the technical details and timelines, and answering questions from the participants/implementers. Registration: https://hubs.la/Q02y-m_n0 Wednesday June 12 - Part 2: OpenID4VCI This webinar will give an overview of one of the technical standards that underpin EUDIW ARF: OpenID4VCI, which defines an API for the issuance of Digital Credentials. The focus will be on the technical details and timelines, and answering questions from the participants/implementers. Registration: https://hubs.la/Q02y-mgt0 Thanks to Kristina Yasuda (SPRIND) and Oliver Tebru (MATTR) for presenting these sessions. #OIDC4VC #OIDC4VP #OIDC #OpenWallet #OpenSource #identity #VerifiableCredentials

A few minor editorial tweaks, but good to go for anyone who wishes to implement high assurance decentralized identifiers. Our hope is that we can move this forward as an IETF standard, but that will take several months of testing and iteration. More to come! Once again, thanks to Northern Block and CIRA for participating in this collaborative effort with Digital Governance Council | Conseil de gouvernance numérique #digitaltrust https://lnkd.in/g_mcRH2s

🚨 The DigiCert revocation incident shows why crypto-agility is vital for digital trust. Quick adaptation is key! Check out our latest blog for steps to boost your team’s crypto-agility: https://okt.to/gThFbc #PKI #CertificateManagement #DigitalTrust #DigiCert #Cryptoagility

We have supported NetSecOPEN since its foundation and are very happy that this independent, standardized, multi-vendor, and multi-lab undertaking is coming to fruition. At BlackHat in Las Vegas, Brian Monkman and Kelly Jackson Higgins from Dark Reading talked about how unbiased, valuable next-gen firewall testing best serves the industry. Based on RFC 9411, EANTC carries out NetSecOPEN certification of next-gen firewalls and related products. We believe in the value of consent-based tests, creating unbiased, fair, and reproducible results that enterprises can depend upon for their procurement decisions. At EANTC, we believe that the NetSecOPEN test reports are much more honest in terms of being unbiased, fair, and reproducible. Some other old and new labs out there create flashy competitive reports, declaring winners and losers based on unpublished test plans and moving decision criteria. These may result in more $$$ for the lab from the winning vendors' marketing departments, but they are not necessarily the best decision criteria for enterprise product selection from our point of view. NetSecOPEN would not and could not undertake such testing. We are committed to a professional review of each report by NetSecOPEN's Certification Authority outside the executing labs. We execute tests consistently across multiple labs and are aligned with publicly available internationally standardized test plans and execution guidelines.

This paper proposes the novel concept of an Anti-#Distributed #denial-#of-#service (#DDoS) #Coalition (#ADC), which is a #group #of #network operators that collaboratively increase their DDoS-readiness by sharing fingerprints of the #DDoS #attacks they handle, and carries out DDoS exercises together. The novelty of an ADC is that it combines the technical systems for both of these activities with the legal and governance means to deploy ADCs in practice. This multidisciplinary approach is #unlike #previous #work #on #collaborative #DDoS #mitigation that focused on technology development (and largely failed). The authors make three contributions. First, they develop a #multidisciplinary #blueprint for ADCs in terms of their activities (sharing DDoS fingerprints and carrying out DDoS exercises) and #supporting #legal #agreements and governance mechanisms. Second, they design #two #open-#source #technical systems for ADCs: a "DDoS Clearing House" for sharing DDoS fingerprints, and a "DDoS-CH Cyber Range" for carrying out small-scale DDoS exercises, both of which extend network operators' existing scrubbing services and other standard anti-DDoS measures. Third, they validate the concept of an ADC in practice with the #Netherlands' #national #Anti-#DDoS #Coalition (#Dutch #ADC), a joint effort of 22 network operators from industry, government, and academia that are currently deploying the DDoS-CH and the Cyber Range in production.----Ramin Yazdani, @Thijs van den Hout, @Remco Poortinga - van Wijnen, @Karl Lovink, @Cristian Hesselman More details can be found at this link: https://lnkd.in/gdr7dxTq

Lively discussion at the openSUSE Project conference: Post XZ Backdoor workshop: How to change the ecosystem / openSUSE to avoid similar attacks https://lnkd.in/dPq5K8Qh #SupplyChains need to be secured. https://lnkd.in/dts5BGJQ lists a few ideas how to do this. #infosec

❗ NIS2 Goes into effect on 𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟭𝟳𝘁𝗵! ❗ 👨🏻💻 If you're the #CISO of a cloud-centric organization, you don't have much time to prepare. This white paper from Sysdig contains key recommendations you can leverage to ensure your company effectively adheres to the new requirements and contributes to a more secure digital ecosystem within the European Union. 🇪🇺 Get the white paper here 👉 https://okt.to/gC4wbq

🔍 Stay Informed: Crucial Updates on PKI and Certificate Management! 🌐 🚨 The recent DigiCert certificate revocation incident highlights how it’s no longer just PKI that’s critical infrastructure. Crypto-agility, the ability to quickly adapt and respond to these incidents, is becoming essential to establishing and maintaining digital trust. 🛡️ Discover some crypto-agility essentials to better prepare your team for what’s ahead in our latest blog: https://okt.to/biRlkI #PKI #CertificateManagement #DigitalTrust #DigiCert #CryptoAgility