DiscoverA Digital Identity Digest
A Digital Identity Digest
Claim Ownership

A Digital Identity Digest

Author: Heather Flanagan

Subscribed: 7Played: 68
Share

Description

Welcome to A Digital Identity Digest, brought to you by Heather Flanagan of Spherical Cow Consulting.

Here, we explore the evolving world of digital identity on the web. This podcast is spearheaded by Heather's expertise, where she breaks down complex concepts, shares the latest trends, and provides insightful analyses in online identity management.

Join Heather as she navigates this dynamic digital pasture, delivering content that's both informative and engaging for tech enthusiasts, digital professionals, and the curious alike.

It's time to translate geek to human.

Thanks for listening!

SUBSCRIBE TO THE SHOW ON APPLE PODCASTS: https://apple.co/3RO11vy

To show your support, and help others find the show, please leave me a 5-star review.

LEARN MORE ABOUT THIS EPISODE: https://sphericalcowconsulting.com

—————————

LET'S CONNECT

—————————

LINKEDIN: https://linkedin.com/in/hlflanagan

INSTAGRAM: https://instagram.com/sphericalcowconsulting

YOUTUBE: https://youtube.com/@TheDigitalCowNetwork
38 Episodes
Reverse
In this episode of The Digital Identity Digest, Heather Flanagan offers a practical field guide to digital identity standards, explaining how organizations like the OpenID Foundation, W3C, IETF, and FIDO Alliance shape specifications, drafts, and published standards through very different processes and cultures. Discover how to interpret standards maturity, understand what a draft really means, and evaluate where work sits in the standards development lifecycle, helping implementers, architects, and policy professionals better assess risk, readiness, interoperability, and real-world impact across the digital identity ecosystem.
In this episode of The Digital Identity Digest, Heather Flanagan reflects on Gartner IAM and what it reveals about digital identity decision-making, identity access management priorities, and enterprise buying behavior. The conversation explores how process, not product, often drives outcomes in real-world IAM programs. Learn why overlooked process maturity, invisible identity standards, and interoperability gaps matter, and discover how AI hype distorts expectations across IAM platforms. This episode connects operations, standards, and incentives, offering practical insight for architects, security leaders, and teams navigating sustainable digital identity strategies.
In this episode, Heather Flanagan looks back at the most read Digital Identity Digest posts of 2025, exploring what resonated across digital identity, governance, credentials, and AI. The recap reveals patterns behind shifting priorities, recurring debates, and the questions shaping standards work and system design. Discover how topics like agentic AI and authentication, delegation, decentralization, interoperability, and credential terminology signal where identity architecture is headed. The episode explains why governance matters more than technology alone and why clear language and standards alignment are critical for resilient, trustworthy digital identity systems.
In this episode Heather Flanagan examines how web payments and digital identity are converging at the W3C, exploring digital wallets, browser-based APIs, and regulatory pressure shaping modern payment flows and trust on the web today as standards discussions reveal shifting assumptions across ecosystems. Discover how Secure Payment Confirmation, passkeys, browser-bound keys, and the Digital Credentials API influence fraud prevention, interoperability, and auditability, and why agentic AI, mandate-based consent, and wallet fragmentation make identity design decisions increasingly critical for payments, institutions, and users worldwide.
In this episode of The Digital Identity Digest, Heather Flanagan explores how two emerging browser APIs—FedCM and the Digital Credentials API—are reshaping the identity layer of the web. Learn why browsers are shifting from passive intermediaries to active participants as privacy reforms and regulatory pressure accelerate. Discover how these APIs differ in governance, user experience, and architectural philosophy, and why their proximity raises questions about future convergence. In this episode, explore what this evolution means for federated login, verifiable credentials, wallet ecosystems, and the broader digital identity landscape.
In this episode, discover how today’s rapidly shifting digital identity landscape is bringing new practitioners into the field and challenging long-held assumptions about IAM, trust frameworks, and governance. Learn why even foundational concepts can feel unexpectedly complex as identity becomes integral to products, security, and global compliance. In this episode, discover how community expertise, evolving standards, and differing approaches to risk shape modern digital identity work. Learn why embracing collaboration, asking better questions, and thinking both locally and globally helps practitioners build resilient, future-ready identity systems that can adapt to constant change.
This episode explores what the “open web” truly means amid shifting standards, AI automation, and evolving economic pressures. Drawing on discussions from IETF 124 and W3C TPAC, it highlights how browser architects, policy experts, and researchers are reexamining long-held assumptions about access, interoperability, and the role of automated agents. Learn why openness isn’t a binary state but a multidimensional spectrum shaped by values such as attribution, consent, and continuity. The conversation offers a grounded look at how technical governance and community norms must adapt to keep the web both usable and sustainable.
Digital identity wallets are becoming a central focus in global identity conversations, driven by regulatory pressure, rapid technical evolution, and growing expectations around interoperability. This episode examines how layered architectures, protocol choices, and platform behaviors shape the user experience in ways that are often misunderstood. Listeners will learn why the Digital Credentials API (DCAPI) is frequently blamed for issues it cannot control, how differing operating system and browser implementations create fragmentation, and why meaningful governance and clear technical boundaries are essential for secure, privacy-respecting digital identity ecosystems.
This episode explores the regulator’s dilemma at the heart of digital infrastructure, where accountability, compliance, and governance reshape the systems they aim to protect. Heather Flanagan examines how modern identity, critical infrastructure, and risk management challenges emerge as digital environments outgrow traditional oversight models. Listeners will learn why compliance-era controls no longer match today’s API-driven reality, how sovereignty contributes to Internet fragmentation, and why resilience now depends on coordination and shared accountability. The discussion offers a clear, thoughtful perspective on evolving digital identity governance.
When every digital system is labeled as critical infrastructure, do we actually make the Internet safer—or just more fragile? In this episode of The Digital Identity Digest, Heather Flanagan examines the growing tension between protection, control, and interdependence in our global digital ecosystem. Through examples from the U.S. and EU, Heather explores how expanding definitions of “critical” can blur accountability, create policy confusion, and undermine true cyber resilience. Listeners will learn why meaningful protection requires prioritization, coordination, and a more selective approach to digital infrastructure security.
When AWS went down, payments failed and digital life froze — exposing how fragile our cloud-based world really is. In this episode of Digital Identity Digest, Heather Flanagan explores why AWS, Stripe, Twilio, and Okta have become the new critical infrastructure of global commerce. Discover how invisible digital dependencies shape resilience, why uptime isn’t true stability, and what “too big to fail” means in the age of APIs. Essential listening for anyone in digital identity, cloud computing, cybersecurity, or tech policy.
For decades, standards development has been anchored in the idea that the Internet is (and should be) one global network. If we could just get everyone in the room—vendors, governments, engineers, and civil society—we could hash out common rules that worked for all.
I've been having an intellectually fascinating time diving into Internet fragmentation and how it is shaped by supply chains more than protocols. There’s another bottleneck ahead, though, one that’s even harder to reroute: people. Innovation doesn’t happen in a vacuum. It requires human talent that builds systems and sets standards.
I had one of those chance airplane conversations recently—the kind that sticks in your mind longer than the flight itself. My seatmate was reading a book about artificial intelligence, and at one point they described the idea of an “infinitely growing AI.” I couldn’t help but giggle a bit.
Many people reading this post grew up believing and expecting in a single, borderless Internet: a vast network of networks that let us talk, share, and build without arbitrary walls. I like that model, probably because I am a globalist, but I don't think that's where the world is heading.
When not distracted by AI (which, you have to admit, is very distracting) I’ve been thinking a lot about delegation in digital identity. We have the tools that allow administrators or individuals grant specific permissions to applications and service.  In theory, it’s a clean model.
With the right motivation, even I will write a blog post on a dare. And the dare I got was to write a post about what librarians and pirate captains have in common, and why it matters for standards development. (If you can’t have fun when writing, what’s the point?)
Google recently gave us something we’ve been waiting on for years: hard numbers on how much energy an AI prompt uses. According to their report, the median Gemini prompt consumes just 0.24 watt-hours of electricity — roughly running a microwave for a second — along with some drops of water for cooling.
We’ve been talking about identity and access for people for decades (millennia if you think outside tech). Policies, role assignments, reviews, zero trust — these are familiar tools. The assumptions that go into them, however, don't quite work when the "user" is no longer a person." Enter in the AI Agent.
We don’t spend much time thinking about the roads we drive on—until one cracks, collapses, or dumps us somewhere we didn’t mean to be. Identity in the age of agentic AI? Same deal. It’s infrastructure. Like a good road, it needs to be ready for traffic we can’t imagine.
loading
Comments 
loading