Translating geek to human
Heather explores why technical standards have never been truly separate from politics, even when they remain nonpartisan. This episode examines how choices around interoperability, privacy, security, and user needs embed values into Internet standards, influencing trust, authority, and the relationships between people, institutions, and technology. Learn how standards bodies navigate issues such…
Heather examines why a simple conference selfie can become one of the most meaningful records of your professional life. Rather than posting for social media, she explores how preserving moments with colleagues, collaborators, and mentors helps capture the relationships that shape careers and strengthen professional communities. Discover how thoughtful conference etiquette, privacy, and consent…
In this episode, Heather explores a practical framework for researching complex technology topics and building recommendations that stand up to scrutiny. From defining the right research question to evaluating academic literature, institutional reports, and real-world implementation, she explains how disciplined research creates stronger strategic decisions. Learn how source verification,…
Discover how the Identity Salon creates a high trust, vendor neutral space for senior identity practitioners to explore the five to seven year challenges shaping digital identity. Heather shares why forward looking conversations matter and how candid discussion can surface architectural assumptions before they become operational problems. Explore how identity proofing, digital wallets, AI agents,…
Learn why the word governance can mean very different things across digital identity, Identity Governance and Administration (IGA), and AI governance. This episode explores how those differences affect enterprise identity systems, access management, and the growing role of artificial intelligence in identity-related decision-making. Discover how AI-powered identity governance introduces new…
Heather explores the fine line between healthy dissent and procedural obstruction in standards development, examining how appeals, objections, and governance processes can strengthen collaboration—or slowly undermine it. This episode considers why protecting fairness also requires protecting the people doing the technical work. Learn how process abuse affects standards organizations, contributor…
Heather examines why choosing the right discovery mechanism is one of the most challenging aspects of digital identity architecture. This episode explores how DNS, well-known URIs, registries, and catalogs each solve different discovery problems, and why understanding trust, authority, and governance must come before selecting infrastructure. Discover how discovery mechanisms shape privacy,…
Discover how discovery is evolving from simply finding information to enabling automated action across AI agents, digital identity systems, and distributed services. This episode explores why capability discovery, metadata, and governance have become essential as software increasingly discovers, selects, and invokes resources on our behalf. Learn how service discovery, Model Context Protocol…
Examine the growing challenge of managing the digital lives we accumulate over time. From forgotten accounts and subscriptions to digital estate planning and account recovery, this episode explores how personal identity data becomes increasingly difficult to discover, manage, and access as our online relationships expand. Discover why account discovery, digital inheritance, password managers, and…
“In the first post in this series, I framed discovery as a broader systems problem.” The challenge is not simply that search engines need to be better. Search is useful for public, indexed information, but discovery reaches much further than that. It is about how people and systems determine what exists, where it lives, whether Continue Reading The post Identity Discovery Is More Than Finding the…
Heather explores why discovery is a much broader challenge than search, especially in digital identity, information management, and emerging AI ecosystems. Drawing on recent discussions and research, this episode examines how people find, evaluate, and trust information scattered across accounts, platforms, credentials, and services. Learn how information overload, filtering, governance, and…
Heather explores why appeals and formal objections are not failures in Internet standards development. This episode examines how consensus-based organizations like the W3C and IETF handle serious technical disagreement, why governance processes matter, and how standards groups balance collaboration, transparency, and accountability during difficult decisions. Through practical insights on…
Learn why many organizations struggle to prioritize digital identity, even when identity systems are critical to security, trust, and operations. This episode explores the growing gap between advanced identity industry discussions and the practical realities facing sectors like publishing, healthcare, research, and higher education. Understand how identity architecture, proofing, governance, and…
Discover how digital identity wallets and verifiable credentials are moving from theory into real-world infrastructure, even as standards and implementation models remain unsettled. This episode explores the critical distinction between wallets and credentials, and why confusion between them continues to slow meaningful progress. Gain insight into evolving standards, interoperability challenges,…
Heather examines why identity systems do not actually make decisions on their own, and how enterprise security outcomes emerge from fragmented, distributed processes. By unpacking how identity, risk, and policy tools interact, this episode reframes modern identity architecture as a complex decision-making environment. Explore how deterministic systems, integration gaps, and inconsistent data…
Heather explores how the AI vendor landscape reveals deeper challenges in fragmented identity systems and enterprise security architecture. By examining how tools function across identity, signals, policy, and enforcement layers, this episode reframes AI not as a feature but as part of a broader decision-making ecosystem. Understand why distributed decision systems create complexity, how…
Heather explores what to do after a conference talk is accepted, from reading the speaker agreement to planning travel, using the slide template, and choosing a clear presentation approach. She also explains why focus, rehearsal, and audience fit matter for a strong conference talk. This episode offers practical guidance for conference speakers on preparation, delivery, and event participation. It…
This episode explores age assurance on the internet, where digital identity, privacy, and policy collide. Heather explains why age verification, age estimation, and age assurance are not the same, and why platforms, regulators, and standards bodies are all converging on this complex problem. Discover how current approaches range from self-reported birth dates to cryptographic credentials and…
Heather Flanagan explores how AI agents are moving from browsing the web to buying on behalf of users, and what that shift means for online payments, identity, and digital trust. The episode examines mandates, delegated authority, liability, and the browser’s evolving role in agentic commerce. It also considers why identity standards, consent, and audit evidence matter as AI shopping becomes more…
Heather Flanagan explores how AI-enabled browsers challenge the traditional definition of web user agents and what this means for digital identity, web architecture, and standards. As browsers evolve from passive tools to active agents, long-standing assumptions about user representation and control are being tested. This episode examines the implications for user safety, automation, and…
Heather Flanagan explores how AI browsers are reshaping the definition of a web user agent, challenging long-standing web architecture principles around user control, consent, and interaction. As AI-driven features evolve from assistance to autonomous action, the browser’s traditional intermediary role begins to shift in subtle but important ways. She examines key questions around delegation,…
Heather Flanagan explores the complex world of ISO and IEC standards and why these global organizations play a critical role in digital identity infrastructure. From national body participation models to the scale of international standardization, this episode examines how these institutions shape technology far beyond traditional open standards communities. Discover how structures like ISO/IEC…
Heather Flanagan explores why conference submissions succeed and why many proposals get rejected during call for proposals review. As a content chair, she shares what reviewers look for in an abstract, including clear outcomes, audience fit, and authentic voice over generic buzzwords. Get actionable guidance on using generative AI to polish—not replace—your ideas, plus tips for sharper titles and…
Heather Flanagan explores how digital identity wallets are shifting from experimental concepts into real infrastructure, as selective disclosure and zero knowledge proofs move from theory into production. Drawing on recent policy, payments, and wallet deployments, she frames the architectural decisions now facing teams building privacy-preserving identity systems. The episode examines where system…
In this episode, Heather Flanagan examines what truly defines a successful standard in digital identity. While adoption is often treated as the primary measure of success, she explores why that metric alone fails to capture the complexity of standards development and ecosystem coordination. She unpacks the tension between implementation-first cultures and inclusive governance, highlighting how…
Heather Flanagan explores why the FIDO Alliance can feel difficult to follow from the outside, and why that silence is often misunderstood. This episode examines how FIDO’s approach to standards development differs from more open processes, and what that means for people working in digital identity, authentication, and passkeys. The discussion unpacks the meaning of open standards, member-driven…
Heather Flanagan explores what it really takes to be an effective contributor in standards development and digital identity work. Moving beyond visible roles like working group chairs, the discussion centers on how specifications are actually shaped through collaboration, technical debate, and sustained participation. Discover how contributors add value as subject matter experts, implementers, and…
Heather Flanagan examines internet fragmentation through the lens of modern internet shutdowns. Using recent, well-documented cases, she explains how connectivity is selectively constrained and why shutdowns are no longer rare emergencies but predictable outcomes of network architecture and governance. Discover how these shutdowns directly impact digital identity systems, from federation failures…
Discover how the OpenID Foundation’s Digital Credentials Protocols Working Group is shaping real-world digital credential issuance and presentation. Learn why standards decisions around interoperability, credential formats, and web-based flows matter for implementers, regulators, and identity architects navigating a complex digital identity ecosystem. Discover how pseudonymous authentication,…
Learn why the idea of an “AI system” is quietly breaking down under modern AI governance and deployment realities. Heather Flanagan examines how agentic workflows, standards debates, and policy frameworks are exposing gaps between governance language and real-world AI architectures. Discover how this disconnect affects digital identity, accountability, and interoperability, and why unclear…
In this episode, Heather Flanagan offers a practical field guide to digital identity standards, explaining how organizations like the OpenID Foundation, W3C, IETF, and FIDO Alliance shape specifications, drafts, and published standards through very different processes and cultures. Discover how to interpret standards maturity, understand what a draft really means, and evaluate where work sits in…
Heather Flanagan reflects on Gartner IAM and what it reveals about digital identity decision-making, identity access management priorities, and enterprise buying behavior. The conversation explores how process, not product, often drives outcomes in real-world IAM programs. Learn why overlooked process maturity, invisible identity standards, and interoperability gaps matter, and discover how AI…
In this episode, Heather Flanagan looks back at the most read Digital Identity Digest posts of 2025, exploring what resonated across digital identity, governance, credentials, and AI. The recap reveals patterns behind shifting priorities, recurring debates, and the questions shaping standards work and system design. Discover how topics like agentic AI and authentication, delegation,…
In this episode Heather Flanagan examines how web payments and digital identity are converging at the W3C, exploring digital wallets, browser-based APIs, and regulatory pressure shaping modern payment flows and trust on the web today as standards discussions reveal shifting assumptions across ecosystems. Discover how Secure Payment Confirmation, passkeys, browser-bound keys, and the Digital…
In this episode of The Digital Identity Digest , Heather Flanagan explores how two emerging browser APIs—FedCM and the Digital Credentials API—are reshaping the identity layer of the web. Learn why browsers are shifting from passive intermediaries to active participants as privacy reforms and regulatory pressure accelerate. Discover how these APIs differ in governance, user experience, and…
In this episode, discover how today’s rapidly shifting digital identity landscape is bringing new practitioners into the field and challenging long-held assumptions about IAM, trust frameworks, and governance. Learn why even foundational concepts can feel unexpectedly complex as identity becomes integral to products, security, and global compliance. In this episode, discover how community…
This episode explores what the “open web” truly means amid shifting standards, AI automation, and evolving economic pressures. Drawing on discussions from IETF 124 and W3C TPAC, it highlights how browser architects, policy experts, and researchers are reexamining long-held assumptions about access, interoperability, and the role of automated agents. Learn why openness isn’t a binary state but a…
Digital identity wallets are becoming a central focus in global identity conversations, driven by regulatory pressure, rapid technical evolution, and growing expectations around interoperability. This episode examines how layered architectures, protocol choices, and platform behaviors shape the user experience in ways that are often misunderstood. Listeners will learn why the Digital Credentials…
This episode explores the regulator’s dilemma at the heart of digital infrastructure, where accountability, compliance, and governance reshape the systems they aim to protect. Heather Flanagan examines how modern identity, critical infrastructure, and risk management challenges emerge as digital environments outgrow traditional oversight models. Listeners will learn why compliance-era controls no…
When every digital system is labeled as critical infrastructure , do we actually make the Internet safer—or just more fragile? In this episode of The Digital Identity Digest , Heather Flanagan examines the growing tension between protection, control, and interdependence in our global digital ecosystem. Through examples from the U.S. and EU, Heather explores how expanding definitions of “critical”…
When AWS went down, payments failed and digital life froze — exposing how fragile our cloud-based world really is. In this episode of Digital Identity Digest , Heather Flanagan explores why AWS, Stripe, Twilio, and Okta have become the new critical infrastructure of global commerce. Discover how invisible digital dependencies shape resilience, why uptime isn’t true stability, and what “too big to…
For decades, standards development has been anchored in the idea that the Internet is (and should be) one global network. If we could just get everyone in the room—vendors, governments, engineers, and civil society—we could hash out common rules that worked for all. The post Can Standards Survive Trade Wars and Sovereignty Battles? appeared first on Spherical Cow Consulting .
I've been having an intellectually fascinating time diving into Internet fragmentation and how it is shaped by supply chains more than protocols. There’s another bottleneck ahead, though, one that’s even harder to reroute: people. Innovation doesn’t happen in a vacuum. It requires human talent that builds systems and sets standards. The post The People Problem: How Demographics Decide the Future…
I had one of those chance airplane conversations recently—the kind that sticks in your mind longer than the flight itself. My seatmate was reading a book about artificial intelligence, and at one point they described the idea of an “infinitely growing AI.” I couldn’t help but giggle a bit. The post Why Tech Supply Chains, Not Protocols, Set the Limits on AI and the Internet appeared first on…
Many people reading this post grew up believing and expecting in a single, borderless Internet: a vast network of networks that let us talk, share, and build without arbitrary walls. I like that model, probably because I am a globalist, but I don't think that's where the world is heading. The post The End of the Global Internet appeared first on Spherical Cow Consulting .
When not distracted by AI (which, you have to admit, is very distracting) I’ve been thinking a lot about delegation in digital identity. We have the tools that allow administrators or individuals grant specific permissions to applications and service. In theory, it’s a clean model. The post Delegation and Consent: Who Actually Benefits? appeared first on Spherical Cow Consulting .
With the right motivation, even I will write a blog post on a dare. And the dare I got was to write a post about what librarians and pirate captains have in common, and why it matters for standards development. (If you can’t have fun when writing, what’s the point?) The post Pirates, Librarians, and Standards Development appeared first on Spherical Cow Consulting .
Google recently gave us something we’ve been waiting on for years: hard numbers on how much energy an AI prompt uses. According to their report, the median Gemini prompt consumes just 0.24 watt-hours of electricity — roughly running a microwave for a second — along with some drops of water for cooling. The post Who Really Pays When AI Agents Run Wild? Incentives, Identity, and the Hidden Bill…
We’ve been talking about identity and access for people for decades (millennia if you think outside tech). Policies, role assignments, reviews, zero trust — these are familiar tools. The assumptions that go into them, however, don't quite work when the "user" is no longer a person." Enter in the AI Agent. The post AI Permissions vs. Human Permissions: What Really Changes? appeared first on…
We don’t spend much time thinking about the roads we drive on—until one cracks, collapses, or dumps us somewhere we didn’t mean to be. Identity in the age of agentic AI? Same deal. It’s infrastructure. Like a good road, it needs to be ready for traffic we can’t imagine. The post Roads, Robots, and Responsibility: Why Agentic AI Needs Identity Infrastructure appeared first on Spherical Cow…