identity#
102 picked talks tagged identity, newest conference first.
RIPE 93#
hack.lu 2026#
SwiNOG #42#
ACM IMC 2026#
Capacity Europe 2026#
OCP Global Summit 2026#
OPI Summit on DPUs/IPUs 2026#
AI Engineer New York 2026#
PETS 2026#
- A Risk Assessment Framework for Digital Identification Systems
- Di5Guise: 5G Privacy with vSIM
- OAuthHub: Mitigating OAuth Data Overaccess through a Local Data Hub
- Personalizing Agent Privacy Decisions via Logical Entailment
- Privacy Pass is Anamorphic: Practical Consequences and Attacks in the Black-box Model
- zkRevoke: Configurable Untraceability for Verifiable Credentials using ZKPs
IETF 126 (Vienna)#
- Agent Authorization use cases and gap analysis
- AI Agent Authentication and Authorization
- Delegate SD-JWT
- OAuth SPIFFE Client Authentication
- PEDIGREE: Verifiable Delegation Identity for Agentic AI Systems
- Verifiable Proof of Environment Attestation Profile
- WIMSE Trust Domain Discovery
- WIMSE Workload Credentials
- WIMSE Workload-to-Workload Authentication with HTTP Signatures
- Workload Identifier Origin Hint for TLS ClientHello
nog.fi meeting 2026.06#
Cisco Live US 2026 (Las Vegas)#
- Hijacking Trust: Weaponizing Stolen Cookies and Tokens - BRKSEC-2132
- Hunting the Invisible Army: Visibility for AI Agents & Non-human Identities - BRKSEC-2067
- Reclaiming Your Agency: MCP, OAuth 2.1 and the Power to Automate Anything - BRKSEC-2065
- Your AI Agents Don't Talk to My AI Agents - Let's Fix That! - BRKETI-1009
- Zero Trust for Agents - PSOSEC-2344
NANOG 97#
MLSys 2026#
RIPE 92 (Edinburgh)#
KubeCon + CloudNativeCon Europe 2026#
- Evolving Baremetal-as-a-Service: Secure Multi-Cluster Networking and Service Identity Automation
- From Static Tokens to Attestation: The Evolution of Secure Node Joining
- SPIFFE Meets OAuth: Federated Identity for Cloud Native Workloads
- When an Agent Acts on Your Behalf, Who Holds the Keys?
- WIT Happens: Exploring the Latest Evolution of the SPIFFE and WIMSE Workload Identity Standards
IETF 125 (Shenzhen)#
- Agent-to-Agent (A2A) Profile for OAuth Transaction Tokens
- Cryptographically Verifiable Actor Chains for OAuth 2.0 Token Exchange
- JSON Web Proof
- OAuth SPIFFE Client Authentication
- One Signature Certificates
- Workload Identifier Origin Hint for TLS ClientHello
GTC 2026#
Cisco Live Europe 2026 (Amsterdam)#
- Hijacking Trust: Weaponizing Stolen Cookies and Tokens - BRKSEC-2132
- Rethinking Identity, Policy, and Access Control (IPAC) for Agentic AI - BRKETI-2623
APRICOT 2026 (Jakarta)#
- Authenticating networks with RPKI RSC
- Keynote: The Agentic Shift: The Internet Industry Reimagined
- What’s new at the IETF?
CfgMgmtCamp Ghent 2026#
FOSDEM 2026#
- Credentials for Linux: Bringing Passkeys to the Linux desktop
- SSH logins in practice: certificates vs. OPKSSH
ACM CoNEXT 2025#
- An Empirical Analysis of the Nostr Social Network
- SpectraCert: A Hierarchical System for Dynamic Spectrum License Enforcement
AutoCon 4 (Austin)#
KubeCon + CloudNativeCon North America 2025#
- Authenticating and Authorizing Every Connection at Uber
- Design Patterns for Consistent Centralized Authorization
- From Bespoke To Bulletproof: SPIFFE/SPIRE With ESO for Enterprise Zero Trust
- Sponsored Keynote: Anchoring Trust in the Age of AI — Identities Across Humans, Machines, and Models
IETF 124 (Montreal)#
- JSON Web Proof
- OAuth 2.0 Delegated Authorization
- OAuth SPIFFE Client Authentication
- SD-JWT-based Verifiable Digital Credentials (SD-JWT VC)
- Selective Disclosure CBOR Web Tokens (SD-CWT)
- Transaction Tokens
- WIMSE Applicability for AI Agents
- WIMSE Architecture
hack.lu 2025#
RIPE 91 (Bucharest)#
OCP Global Summit 2025#
USENIX Security '25 (34th USENIX Security Symposium)#
- A Framework for Abusability Analysis: The Case of Passkeys in Interpersonal Threat Models
- Detecting Compromise of Passkey Storage on the Cloud (CASPER)
- Universal Cross-app Attacks: Exploiting and Securing OAuth 2.0 in Integration Platforms
IETF 123 (Madrid)#
- ANIMA: BRSKI with Pledge in Responder Mode + Constrained BRSKI — draft-ietf-anima-brski-prm, draft-ietf-anima-constrained-voucher
- COSE/JOSE Post-Quantum Signatures: ML-DSA, SLH-DSA, FN-DSA + PQ KEMs — draft-ietf-cose-dilithium, draft-ietf-cose-sphincs-plus, draft-ietf-cose-falcon, draft-ietf-jose-pqc-kem
- JOSE JSON Web Proof (JWP) — draft-ietf-jose-json-web-proof
- OAuth 2.0 Attestation-Based Client Authentication — draft-ietf-oauth-attestation-based-client-auth
- OAuth Identity and Authorization Chaining Across Domains + Transaction Tokens — draft-ietf-oauth-identity-chaining, draft-ietf-oauth-transaction-tokens
- SPICE: Selective Disclosure CWT (SD-CWT) + Verifiable Digital Credentials architecture — draft-ietf-spice-sd-cwt, draft-ietf-spice-vdcarch
- WIMSE Workload Proof Token (WPT) + Workload Credentials + HTTP Signatures — draft-ietf-wimse-wpt, draft-ietf-wimse-workload-creds, draft-ietf-wimse-http-signature
- WIMSE Workload-to-Workload Authentication — draft-ietf-wimse-s2s-protocol
- Workload Identifier — draft-ietf-wimse-identifier
- Workload Identity in a Multi System Environment (WIMSE) Architecture — draft-ietf-wimse-arch
KubeCon + CloudNativeCon Europe 2025 (London)#
- Beyond Classical Cryptography: Building Quantum-Resistant Cloud Native Infrastructure With SPIFFE
- Encryption, Identities, and Everything in Between; Building Secure Kubernetes Networks
- IAM, Agent: Identity for Autonomous AI
- Identity-based Trust — Till Death Do We Part?
- SPIFFE in Practice: Universal Identity for WebAssembly Workloads
- Workload Identity for Humans: A Twelve-Factor Approach
- Zero Trust at Shopify Scale: Automating MTLS Across Thousands of Services
IETF 122 (Bangkok)#
- COSE Receipts / Merkle Tree Proofs with CCF — draft-ietf-cose-merkle-tree-proofs, draft-ietf-scitt-receipts-ccf-profile
- JSON Web Proof & JSON Proof Token — draft-ietf-jose-json-web-proof, draft-ietf-jose-json-proof-token
- OAuth Attestation-Based Client Auth & Cross-App Access — draft-ietf-oauth-attestation-based-client-auth, draft-ietf-oauth-identity-assertion-authz-grant
- OAuth Cross-Domain Identity Chaining & Transaction Tokens — draft-ietf-oauth-identity-chaining, draft-ietf-oauth-transaction-tokens
- Selective-Disclosure Credentials: SD-JWT VC, Token Status List, SD-CWT — draft-ietf-oauth-sd-jwt-vc, draft-ietf-oauth-status-list, draft-ietf-spice-sd-cwt
- WIMSE Architecture — draft-ietf-wimse-arch
- WIMSE Workload Credentials, Proof Token, and Identifier — draft-ietf-wimse-workload-creds, draft-ietf-wimse-wpt, draft-ietf-wimse-identifier
- WIMSE Workload-to-Workload Authentication — draft-ietf-wimse-s2s-protocol, draft-ietf-wimse-mutual-tls, draft-ietf-wimse-http-signature