Blog
Articles, tutorials, and field notes on identity, integration, API management, and application security — spanning nearly two decades of hands-on work.
API Security vs. Web Application Security Part 1: A Brief History of Web Application Architecture
This post was originally published as “API Security vs. Web Application Security Part 1: A Brief History of Web Application Architecture” on the Levvel Blog.
DSig Part 3: XML DSig vs. JSON Web Signature
This post was originally published as “DSig Part 3: XML DSig vs. JSON Web Signtaure” on the Levvel Blog.
DSig Part 2: JSON Web Signature (JWS)
This post was originally published as “DSig Part 2: JSON Web Signature (JWS)” on the Levvel Blog.
DSig Part 1: XML Digital Signature and WS-Security Integrity
This post was originally published as “DSig Part 1: XML Digital Signature and WS-Security Integrity” on the Levvel Blog.
Nissan LEAF, API Security, Who Owns API Security, and How Much Security Is Enough?
This post was originally published as “Nissan LEAF, API Security, Who Owns API Security, and How Much Security Is Enough?” on the Levvel Blog.
The Anatomy of an API Management Solution
This post was originally published as “The Anatomy of an API Management Solution” on the Levvel Blog.
What is API Management?
This post was originally published as “What is API Management?” on the Levvel Blog.
What are APIs? (The Technology Perspective)
This post was originally published as “What are APIs? (The Technology Perspective)” on the Levvel Blog.
Modernizing SOA with APIs
This post was originally published as “Modernizing SOA with APIs” on the Levvel Blog.
Protecting Server Resources Hosting Unauthenticated APIs
This post was originally published as “Protecting Server Resources Hosting Unauthenticated APIs” on the Levvel Blog.
Convert an X509v3 Binary Security Token to PEM Format
This tutorial describes how to convert a Binary Security Token extracted from a SOAP message into a valid PEM format that can be read by openssl or similar tool. If you are ever troubleshooting the use of X509v3 certificates used with WS-Security, this can come in very handy.
WS-Security Integrity (XML Digital Signature)
This post continues exploring the use of XML Digital Signature; this time we look at WS-Security Integrity (use of XML Digital Signatures with WS-Security). Our examples show a digital signature and a timestamp in a WS-Security <Security> SOAP Header.