- Identity is the new perimeter
- Password managers are the best solution available right now
- National ID cards can be good for security and privacy
- Output sanitisation trumps input validation
- Be pragmatic; perfect is the enemy of good enough
- The long-term solution is for vendors to build more security into systems