Scott Brady's Newsletter

RSA keys, Cryptopals, and oidc-provider

How to load RSA keys in .NET, breaking AES-ECB, fun with oidc-provider, and AI generated Lemurs.

Mar 23, 2023 • 

Scott Brady

November 2022

OAuth client authentication, leadership, and social media woes

Client credentials beyond passwords, more leadership reading, and more updates.

Nov 28, 2022 • 

Scott Brady

October 2022

September '22 (October edition) - ClearBank, leadership, and more fun with JWTs

A deep dive into JWE, python JWTs, and a new job.

Oct 4, 2022 • 

Scott Brady

August 2022

New Pluralsight Course - JWT Fundamentals

Learn how to use JWTs securely in my latest Pluralsight course.

Aug 10, 2022 • 

Scott Brady

March 2022

March '22 - Step-up authentication, UK Open Banking, and an ROPC update

A deep dive into some advanced OAuth and OpenID Connect topics.

Mar 29, 2022 • 

Scott Brady

January 2022

January '22 - Identity tokens, year in review, & Umbraco

A deep dive into identity tokens, some personal news, and a couple of Umbraco tutorials for OpenID Connect.

Jan 17, 2022 • 

Scott Brady

October 2021

October '21 - XML signing & OAuth updates

This month’s content is all about XML signatures (sorry). But I also updated some popular OAuth content.

Oct 7, 2021 • 

Scott Brady

August 2021

August '21 - ECDSA and ECC keys in .NET

More ECDSA in .NET & .NET Core.

Aug 31, 2021 • 

Scott Brady

June 2021

June '21 - Client auth vs. PKCE

A new article and a new newsletter.

Jun 4, 2021 • 

Scott Brady