Heather

Research is not just finding sources. It is deciding which sources deserve weight, tracking what you found, verifying details, and being honest about what remains uncertain.
New post: how I approach research for defensible, decision-ready papers, including Google Scholar, NGO and international organization searches, source spreadsheets, database checks, cold outreach, and careful use of AI as an organizing aid rather than an authority.

2026-07-20 16:19:49 UTC

With over 100 active Internet Drafts on various topics around AI, a third of the available side meetings, and nearly half of the HotRFC lightning talks at #IETF 126, I’m feeling more than a little overwhelmed with all the heat and so very little light.

2026-07-12 14:00:51 UTC

- reply

I’d have to agree with @npub15ql…c4kz . PKI does a lot of heavy lifting, and goodness knows if you dig deep enough, everything in cybersecurity feels like it is a key management problem. That said, when it comes to the private key being your identity, which identity? Your legal identity in the eyes of the government? Your employee identity in the eyes of your employer(s)? Generating sub-keys from a primary key to cover all the contexts in which you’d need to prove something would turn into a key management problem very quickly, and most people aren’t prepared to handle that. People want whatever end product or service they’re trying to prove themselves to; they do not want to put thought into managing a raft of keys.