Blog

Write-ups

Honest product boundaries and a close look at what Keycloak ships today.

Device trust for Keycloak

What Keycloak actually ships for devices — a trusted-device cookie, X.509, WebAuthn — and why none of them is device posture. An honest boundary: we do not protect the session after login.