corpus.blog
41554 blogs · [ { "id": "01a0c6c5-29c1-7062-8d72-51d6eae0e439", "title": "OpenID for Verifiable Presentations 1.0", "url": "https://danielfett.de/publications/2025-07-09-openid4vp/", "published_at": "2025-07-09T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e53e7b44", "title": "Cross-Device Session Fixation and how the DC API solves it", "url": "https://danielfett.de/2025/03/10/cross-device-session-fixation/", "published_at": "2025-03-10T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ea774894", "title": "FAPI 2.0 Attacker Model and Security Profile", "url": "https://danielfett.de/publications/2025-02-22-fapi/", "published_at": "2025-02-22T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f1ee553b", "title": "SD-JWT and SD-JWT VC 101", "url": "https://danielfett.de/talks/2024-10-29-sd-jwt-101-iiw/", "published_at": "2024-10-29T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f193c1dd", "title": "High-Security and Interoperable OAuth 2: What's the latest? | FAPI 2.0", "url": "https://danielfett.de/talks/2024-04-01-fapi2-high-security-oauth-whats-the-latest/", "published_at": "2024-04-01T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e9a2dcec", "title": "SD-JWT Verifiable Credentials", "url": "https://danielfett.de/publications/2023-07-01-sd-jwt-vc/", "published_at": "2023-07-01T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f14dd7d5", "title": "Current Work and Future Trends in Selective Disclosure", "url": "https://danielfett.de/talks/2023-05-11-sd-jwt-panel/", "published_at": "2023-05-11T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f1468e00", "title": "SD-JWT Reference Implementation at the OpenWalletFoundation (OWF)", "url": "https://danielfett.de/talks/2023-05-09-sd-jwt-library-at-eic/", "published_at": "2023-05-09T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e8c23b53", "title": "Cross-Device Flows: Security Best Current Practice", "url": "https://danielfett.de/publications/2022-10-01-cross-device-security-bcp/", "published_at": "2022-10-01T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f133285b", "title": "Podcast: Daniel Fett on privacy-preserving measures and SD-JWT", "url": "https://danielfett.de/talks/2022-09-29-identity-unlocked-sd-jwt/", "published_at": "2022-09-29T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e896b752", "title": "Selective Disclosure for JWTs (SD-JWT)", "url": "https://danielfett.de/publications/2022-05-01-selective-disclosure/", "published_at": "2022-05-01T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f0948805", "title": "OpenID Advanced Syntax for Claims", "url": "https://danielfett.de/talks/2022-04-26-openid-advanced-syntax-for-claims/", "published_at": "2022-04-26T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e7b60e0b", "title": "OAuth 2.0 Authorization Server Issuer Identification", "url": "https://danielfett.de/publications/2022-03-18-rfc9207/", "published_at": "2022-03-18T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e5769880", "title": "Improving OAuth App-to-App Security", "url": "https://danielfett.de/2020/11/27/improving-app2app/", "published_at": "2020-11-27T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f00cac7c", "title": "Next-Gen Authorization Throwdown: It's Not Your Grandfather's OAuth", "url": "https://danielfett.de/talks/2020-07-14-next-gen-authorization-throwdown-panel/", "published_at": "2020-07-14T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ef6b5d28", "title": "Identity Assurance with OpenID Connect", "url": "https://danielfett.de/talks/2020-06-29-identiverse-identity-assurance-openid-connect/", "published_at": "2020-06-29T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e5e11249", "title": "Finding and Fixing TLS Misconfigurations with TLS Profiler", "url": "https://danielfett.de/2020/05/22/open-source-tls-scanner/", "published_at": "2020-05-22T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e61b6af3", "title": "PKCE vs. Nonce: Equivalent or Not?", "url": "https://danielfett.de/2020/05/16/pkce-vs-nonce-equivalent-or-not/", "published_at": "2020-05-16T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e69caddd", "title": "DPoP Attacker Model", "url": "https://danielfett.de/2020/05/04/dpop-attacker-model/", "published_at": "2020-05-04T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e7451bf5", "title": "Mix-Up, Revisited", "url": "https://danielfett.de/2020/05/04/mix-up-revisited/", "published_at": "2020-05-04T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e6cb2ebf", "title": "Sicher autorisieren - Wie man OAuth 2.0 richtig verwendet", "url": "https://danielfett.de/publications/2020-03-27-sicher-autorisieren/", "published_at": "2020-03-27T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ef391294", "title": "How (Not) to Use OAuth", "url": "https://danielfett.de/talks/2020-01-28-how-not-to-use-oauth/", "published_at": "2020-01-28T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ee916233", "title": "Das Sicherheits-Upgrade für OAuth 2.0", "url": "https://danielfett.de/talks/2019-12-10-das-sicherheitsupgrade-fuer-oauth/", "published_at": "2019-12-10T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6edf0f2ef", "title": "How (Not) to Use OAuth", "url": "https://danielfett.de/talks/2019-09-24-how-not-to-use-oauth/", "published_at": "2019-09-24T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6edd5c45c", "title": "How (Not) to Use OAuth", "url": "https://danielfett.de/talks/2019-08-10-how-not-to-use-oauth/", "published_at": "2019-08-10T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e58e6323", "title": "OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer", "url": "https://danielfett.de/publications/2019-07-08-draft-dpop/", "published_at": "2019-07-08T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e6515443", "title": "OAuth 2.0 Security Best Current Practice", "url": "https://danielfett.de/publications/2019-07-08-oauth-bcp/", "published_at": "2019-07-08T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ed541fee", "title": "How (Not) to Use OAuth", "url": "https://danielfett.de/talks/2019-04-17-how-not-to-use-oauth/", "published_at": "2019-04-17T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ec559bcb", "title": "OAuth Security Reinforced", "url": "https://danielfett.de/talks/2019-03-20-oauth-security-reinforced/", "published_at": "2019-03-20T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e7655b61", "title": "New OAuth Security Recommendations", "url": "https://danielfett.de/2019/03/04/new-oauth-security-recommendations/", "published_at": "2019-03-04T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e49ca48e", "title": "Cross-Browser Payment Initiation Attack", "url": "https://danielfett.de/publications/2019-03-01-cross-browser-payment-initiation/", "published_at": "2019-03-01T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e7e1832f", "title": "Writing RFCs with Markdown", "url": "https://danielfett.de/2019/02/28/writing-rfcs-with-markdown/", "published_at": "2019-02-28T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e3ce4ef8", "title": "An Extensive Formal Security Analysis of the OpenID Financial-grade API", "url": "https://danielfett.de/publications/2019-02-01-openid-fapi-formal-analysis/", "published_at": "2019-02-01T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e33f56cf", "title": "An Expressive Formal Model of the Web Infrastructure", "url": "https://danielfett.de/publications/2018-10-19-an-expressive-formal-web-model/", "published_at": "2018-10-19T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e30333ff", "title": "The Web SSO Standard OpenID Connect: In-Depth Formal Security Analysis and Security Guidelines", "url": "https://danielfett.de/publications/2017-04-27-openid-connect-formal-analysis/", "published_at": "2017-04-27T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6ebcf6ec1", "title": "On the Security and Privacy of Modern Single Sign-On in the Web", "url": "https://danielfett.de/talks/2016-12-28-on-the-security-of-sso/", "published_at": "2016-12-28T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e2c0b60f", "title": "Pi and More - eine Veranstaltungsreihe rund um \"kleine Computer\"", "url": "https://danielfett.de/publications/2016-09-26-pi-and-more/", "published_at": "2016-09-26T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e2828487", "title": "A Comprehensive Formal Security Analysis of OAuth 2.0", "url": "https://danielfett.de/publications/2016-01-06-oauth-security-analysis/", "published_at": "2016-01-06T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e24b3d5b", "title": "SPRESSO: A Secure, Privacy-Respecting Single Sign-On System for the Web", "url": "https://danielfett.de/publications/2015-08-07-spresso-single-sign-on/", "published_at": "2015-08-07T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e1cabab6", "title": "Analyzing the BrowserID SSO System with Primary Identity Providers Using an Expressive Model of the Web", "url": "https://danielfett.de/publications/2014-11-26-web-model-browserid-primary/", "published_at": "2014-11-26T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6e109d1ec", "title": "An Expressive Model for the Web Infrastructure: Definition and Application to the BrowserID SSO System", "url": "https://danielfett.de/publications/2014-03-07-browser-model-definition/", "published_at": "2014-03-07T00:00:00+00:00" }, { "id": "01a08767-0f13-713c-a1a8-2a21e848c2f7", "title": "Reguläre Ausdrücke", "url": "https://danielfett.de/2006/03/20/regulaere-ausdruecke-tutorial/", "published_at": "2006-03-20T00:00:00+00:00" }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f232e868", "title": "Imprint and Privacy Stuff", "url": "https://danielfett.de/imprint/", "published_at": null }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f2938a51", "title": null, "url": "https://danielfett.de/", "published_at": null }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f30a97c8", "title": null, "url": "https://danielfett.de/projects/", "published_at": null }, { "id": "01a0c6c5-29c1-7062-8d72-51d6f3a8284e", "title": null, "url": "https://danielfett.de/publications/", "published_at": null } ] posts Claim your blog
Back to danielfett.de
Blog · corpus.blog/blogs/danielfett.de/posts

danielfett.de

danielfett.de

2025

OpenID for Verifiable Presentations 1.0original ↗
9 Jul 2025
Cross-Device Session Fixation and how the DC API solves itoriginal ↗
10 Mar 2025
FAPI 2.0 Attacker Model and Security Profileoriginal ↗
22 Feb 2025

2024

SD-JWT and SD-JWT VC 101original ↗
29 Oct 2024
High-Security and Interoperable OAuth 2: What's the latest? | FAPI 2.0original ↗
1 Apr 2024

2023

SD-JWT Verifiable Credentialsoriginal ↗
1 Jul 2023
Current Work and Future Trends in Selective Disclosureoriginal ↗
11 May 2023
SD-JWT Reference Implementation at the OpenWalletFoundation (OWF)original ↗
9 May 2023

2022

Cross-Device Flows: Security Best Current Practiceoriginal ↗
1 Oct 2022
Podcast: Daniel Fett on privacy-preserving measures and SD-JWToriginal ↗
29 Sept 2022
Selective Disclosure for JWTs (SD-JWT)original ↗
1 May 2022
OpenID Advanced Syntax for Claimsoriginal ↗
26 Apr 2022
OAuth 2.0 Authorization Server Issuer Identificationoriginal ↗
18 Mar 2022

2020

Improving OAuth App-to-App Securityoriginal ↗
27 Nov 2020
Next-Gen Authorization Throwdown: It's Not Your Grandfather's OAuthoriginal ↗
14 Jul 2020
Identity Assurance with OpenID Connectoriginal ↗
29 Jun 2020
Finding and Fixing TLS Misconfigurations with TLS Profileroriginal ↗
22 May 2020
PKCE vs. Nonce: Equivalent or Not?original ↗
16 May 2020
DPoP Attacker Modeloriginal ↗
4 May 2020
Mix-Up, Revisitedoriginal ↗
4 May 2020
Sicher autorisieren - Wie man OAuth 2.0 richtig verwendetoriginal ↗
27 Mar 2020
How (Not) to Use OAuthoriginal ↗
28 Jan 2020

2019

Das Sicherheits-Upgrade für OAuth 2.0original ↗
10 Dec 2019
How (Not) to Use OAuthoriginal ↗
24 Sept 2019
How (Not) to Use OAuthoriginal ↗
10 Aug 2019
OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layeroriginal ↗
8 Jul 2019
OAuth 2.0 Security Best Current Practiceoriginal ↗
8 Jul 2019
How (Not) to Use OAuthoriginal ↗
17 Apr 2019
OAuth Security Reinforcedoriginal ↗
20 Mar 2019
New OAuth Security Recommendationsoriginal ↗
4 Mar 2019
Cross-Browser Payment Initiation Attackoriginal ↗
1 Mar 2019
Writing RFCs with Markdownoriginal ↗
28 Feb 2019
An Extensive Formal Security Analysis of the OpenID Financial-grade APIoriginal ↗
1 Feb 2019

2018

An Expressive Formal Model of the Web Infrastructureoriginal ↗
19 Oct 2018

2017

The Web SSO Standard OpenID Connect: In-Depth Formal Security Analysis and Security Guidelinesoriginal ↗
27 Apr 2017

2016

On the Security and Privacy of Modern Single Sign-On in the Weboriginal ↗
28 Dec 2016
Pi and More - eine Veranstaltungsreihe rund um "kleine Computer"original ↗
26 Sept 2016
A Comprehensive Formal Security Analysis of OAuth 2.0original ↗
6 Jan 2016

2015

SPRESSO: A Secure, Privacy-Respecting Single Sign-On System for the Weboriginal ↗
7 Aug 2015

2014

Analyzing the BrowserID SSO System with Primary Identity Providers Using an Expressive Model of the Weboriginal ↗
26 Nov 2014
An Expressive Model for the Web Infrastructure: Definition and Application to the BrowserID SSO Systemoriginal ↗
7 Mar 2014

2006

Reguläre Ausdrückeoriginal ↗
20 Mar 2006

Undated

Imprint and Privacy Stufforiginal ↗
—
https://danielfett.de/original ↗
—
https://danielfett.de/projects/original ↗
—
https://danielfett.de/publications/original ↗
—