The ABCs of RFCs - Heather Flanagan - ASW #266

We have a lot of questions about standards. How do standards emerge? How do standards encourage adoption? How do they stay relevant as development patterns change and security threats evolve?

We have standards for web appsec (HTML, HTTP), all sorts of protocols, and all sorts of authentication (OAuth, OpenID). Learning how these standards come about can also inform how your own org documents designs and decisions.

Segment resources

• https://datatracker.ietf.org/doc/html/rfc3552
• https://identiverse.com/video/the-butterfly-effect-of-standards-development/
• https://sphericalcowconsulting.com
• https://datatracker.ietf.org/doc/html/rfc6919

In the news, benchmarking prompt injection scanners, using generative AI to jailbreak generative AI, Meta's benchmark for LLM risks, tapping a protocol to hack Magic the Gathering, and more!

Visit https://securityweekly.com/asw for all the latest episodes!

Follow us on Twitter: https://www.twitter.com/secweekly

Like us on Facebook: https://www.facebook.com/secweekly

Show Notes: https://securityweekly.com/asw-266