Keeping Up With Standards Without Pretending You Can Keep Up

Heather explores why keeping up with standards development does not mean tracking everything. This episode looks at how a lightweight standards radar can surface emerging work across digital identity, AI, authorization, credentials, and related technologies, while recognizing that new ideas appear far faster than any individual can follow. Discover how automation, structured public data, and human judgment can work together to identify what deserves closer attention. Heather explains why Internet-Drafts provide signals rather than certainty, how context reveals momentum, and why useful awareness—not perfect completeness—is the more realistic goal.

sphericalcowconsulting.com

Why Identity Governance Is Expanding Beyond Identity

I was talking with a colleague recently about governance, and somewhere in the conversation, we realized we were using the same word to describe two very different problems. ...

kuppingercole.com

Web Authentication API (WebAuthn) Level 3

Web Authentication Level 3 is now a W3C Recommendation! This post covers the new features in L3 to support passkeys, advanced deployment scenarios, improved developer ergonomics, and a peek at what's ...

blog.timcappalli.me

github.com

Staying Useful in a Geopolitical Internet: Reflections from IETF 126

Learn why nation state politics are increasingly shaping technical standards and the future of the Internet. Drawing on reflections from IETF 126, Heather examines how regulatory pressure, geopolitical interests, and competing views of privacy, security, openness, and interoperability can influence standards development and individual contributors. Explore how to participate thoughtfully when larger forces enter the standards process. Heather considers practical ways to evaluate proposals beyond who submits them, recognize patterns, question architectural assumptions, and protect global interoperability while acknowledging legitimate policy concerns and the real harms the Internet can create.

sphericalcowconsulting.com

Technical Standards Were Never Outside Politics

Heather explores why technical standards have never been truly separate from politics, even when they remain nonpartisan. This episode examines how choices around interoperability, privacy, security, and user needs embed values into Internet standards, influencing trust, authority, and the relationships between people, institutions, and technology. Learn how standards bodies navigate issues such as end-to-end encryption, age assurance, surveillance, and global interoperability without becoming legislatures. Heather explains why making architectural values explicit strengthens technical credibility and helps standards communities respond to the growing pressures of regulation, governance, and digital policy.

sphericalcowconsulting.com

A Digital Identity Digest

Latest Episode All Episodes About the Podcast A Digital Identity Digest is an audio companion to my weekly blog. It provides clear, accessible summaries of timely identity topics, helping busy prof…

sphericalcowconsulting.com

Take the Selfie

Heather examines why a simple conference selfie can become one of the most meaningful records of your professional life. Rather than posting for social media, she explores how preserving moments with colleagues, collaborators, and mentors helps capture the relationships that shape careers and strengthen professional communities. Discover how thoughtful conference etiquette, privacy, and consent fit alongside authentic networking and lasting connections. This episode reflects on memory, digital identity, and the people behind the work, offering a reminder that some of the most valuable professional moments are worth preserving, even if they never become public.

sphericalcowconsulting.com

How to Research a Defensible Paper Without Drowning in Sources

In this episode, Heather explores a practical framework for researching complex technology topics and building recommendations that stand up to scrutiny. From defining the right research question to evaluating academic literature, institutional reports, and real-world implementation, she explains how disciplined research creates stronger strategic decisions. Learn how source verification, outreach, structured evidence tracking, and thoughtful use of AI can strengthen research without replacing human judgment. Whether you're writing policy papers, standards proposals, or strategic recommendations, these methods help produce credible, transparent, and defensible work grounded in evidence rather than assumption.

sphericalcowconsulting.com

The Identity Salon: Five-Year Problems, Chatham House Notes, and DNS Nonsense

Discover how the Identity Salon creates a high trust, vendor neutral space for senior identity practitioners to explore the five to seven year challenges shaping digital identity. Heather shares why forward looking conversations matter and how candid discussion can surface architectural assumptions before they become operational problems. Explore how identity proofing, digital wallets, AI agents, governance, delegation, and security architecture increasingly intersect. This episode offers a behind the scenes look at building the Identity Salon, producing Chatham House Rule reports, and creating sustainable conversations that help enterprise identity leaders prepare for what comes next.

sphericalcowconsulting.com

Sun spotlights a classic scene on the Sound

seattletimes.com

When Process Stops Protecting the Work

Heather explores the fine line between healthy dissent and procedural obstruction in standards development, examining how appeals, objections, and governance processes can strengthen collaboration—or slowly undermine it. This episode considers why protecting fairness also requires protecting the people doing the technical work. Learn how process abuse affects standards organizations, contributor participation, and technical decision-making. Heather discusses practical ways to document recurring patterns, support chairs and editors, and preserve constructive disagreement without allowing procedural conflict to overwhelm progress or discourage future contributors.

sphericalcowconsulting.com

Choosing a Discovery Mechanism Is the Hard Part

Heather examines why choosing the right discovery mechanism is one of the most challenging aspects of digital identity architecture. This episode explores how DNS, well-known URIs, registries, and catalogs each solve different discovery problems, and why understanding trust, authority, and governance must come before selecting infrastructure. Discover how discovery mechanisms shape privacy, delegation, authorization, and system behavior. Heather explains why successful digital identity design depends on asking the right architectural questions first, ensuring discovery supports the correct level of trust, governance, and secure action across modern distributed systems.

sphericalcowconsulting.com

When Discovery Starts Taking Action

Discover how discovery is evolving from simply finding information to enabling automated action across AI agents, digital identity systems, and distributed services. This episode explores why capability discovery, metadata, and governance have become essential as software increasingly discovers, selects, and invokes resources on our behalf. Learn how service discovery, Model Context Protocol (MCP), authorization, and trust frameworks shape secure automation. Heather explains why discovery is no longer just a technical lookup, but a critical part of identity, policy, and decision-making in modern digital ecosystems.

sphericalcowconsulting.com

The Digital Life We Forgot We Had

Examine the growing challenge of managing the digital lives we accumulate over time. From forgotten accounts and subscriptions to digital estate planning and account recovery, this episode explores how personal identity data becomes increasingly difficult to discover, manage, and access as our online relationships expand. Discover why account discovery, digital inheritance, password managers, and legacy access tools are only partial solutions. This episode highlights the security, privacy, and governance challenges of personal digital identity, and why recovering and understanding our digital footprint may become one of the most important identity management issues of the future.

sphericalcowconsulting.com

Identity Discovery Is More Than Finding the Login Button

"In the first post in this series, I framed discovery as a broader systems problem." The challenge is not simply that search engines need to be better. Search is useful for public, indexed information, but discovery reaches much further than that. It is about how people and systems determine what exists, where it lives, whether it is relevant, whether it is usable, and whether it should be visible in the first place.

sphericalcowconsulting.com

The Discovery Problem Is Bigger Than Search

Heather explores why discovery is a much broader challenge than search, especially in digital identity, information management, and emerging AI ecosystems. Drawing on recent discussions and research, this episode examines how people find, evaluate, and trust information scattered across accounts, platforms, credentials, and services. Learn how information overload, filtering, governance, and AI-powered tools shape modern discovery experiences. This episode highlights the difference between finding information and understanding what is relevant, trustworthy, and accessible, while exploring why discovery has become a critical architecture, trust, and user experience challenge.

sphericalcowconsulting.com

Appeals Are Not Failures

Heather explores why appeals and formal objections are not failures in Internet standards development. This episode examines how consensus-based organizations like the W3C and IETF handle serious technical disagreement, why governance processes matter, and how standards groups balance collaboration, transparency, and accountability during difficult decisions. Through practical insights on consensus, formal objections, and appeals processes, Heather explains how working group chairs and contributors can manage conflict constructively. The discussion highlights documentation, procedural fairness, and why structured disagreement can ultimately strengthen digital identity standards, technical governance, and long-term interoperability efforts.

sphericalcowconsulting.com

Identity Is Not the Product

Learn why many organizations struggle to prioritize digital identity, even when identity systems are critical to security, trust, and operations. This episode explores the growing gap between advanced identity industry discussions and the practical realities facing sectors like publishing, healthcare, research, and higher education. Understand how identity architecture, proofing, governance, and reusable credentials are often secondary to operational pressures and business priorities. This episode highlights why successful identity adoption depends on solving immediate problems first, while still building toward stronger long-term identity management and digital trust strategies.

sphericalcowconsulting.com

Wallets and Credentials Are Here. Maturity Is Not.

Discover how digital identity wallets and verifiable credentials are moving from theory into real-world infrastructure, even as standards and implementation models remain unsettled. This episode explores the critical distinction between wallets and credentials, and why confusion between them continues to slow meaningful progress. Gain insight into evolving standards, interoperability challenges, and the impact of government regulation on digital identity adoption. This episode highlights why enterprise use cases remain uncertain, how platform providers shape user choice, and why usability, trust, and operational maturity will determine success.

sphericalcowconsulting.com

Identity Systems Don’t Make Decisions

Heather examines why identity systems do not actually make decisions on their own, and how enterprise security outcomes emerge from fragmented, distributed processes. By unpacking how identity, risk, and policy tools interact, this episode reframes modern identity architecture as a complex decision-making environment. Explore how deterministic systems, integration gaps, and inconsistent data interpretation affect access control decisions. This episode highlights why AI and automation increase risk without clear governance, and why organizations must better define decision logic, accountability, and system interactions to ensure consistent, explainable identity and security outcomes.

sphericalcowconsulting.com