AI didn't create the identity problem. It removed the speed limit
After 30 years working in tech across infrastructure, security, dev teams, and product development, one thing has always remained true. Never believe a new...
August 25, 2026
Tags
security
Why Risk-Based MFA is a Game Changer for User Experience
Security measures often feel like they're just making life harder for customers. The problem is that too much friction can work against security. Frustrated...
August 10, 2026
Intelligent MFA Should Challenge Risk, Not Loyal Customers
There's an old line in security: the most secure system is the one that's switched off. It's also completely useless. Every authentication decision you make...
July 9, 2026
Browser-Based OAuth Client: The architecture you shouldn't be using
Of all possible browser-based OAuth architectures, the Browser-Based OAuth Client (BBOC) pattern is the least secure. Despite this, BBOC remains the most...
June 3, 2026
Token-Mediating Backend: An alternative to the BFF architecture
This post discusses the Token-Mediating Backend (TMB) authentication architecture for OAuth 2 applications. It covers how secure TMB is, when to use it, and...
May 7, 2026
Backend-for-Frontend: The most secure architecture for browser-based apps
On September 8, 2025, developer Josh Junon received what looked like a legitimate npm two-factor authentication (2FA) reset email. Within hours, malicious code...
April 22, 2026
Stop Registration Spam With Identity Pre-Verification
In our previous post, Announcing FusionAuth 1.59.0 - The Identity Ibex, we explored the shift towards separate Email and Phone Identities. This was a...
March 6, 2026
Showing 1 to 7 of 26 results