My first impressions: The default db backend is #postgresql, which is cool π . keycloak itself is #java-based (so connects to postgresql through jdbc. Passable). Not the sexiest language, but I forgive them, because it's a 12-year old project. It uses 600MB of RAM, with just me logged in as a web admin user. Passable. Unicode is enforced within any given database. Also cool. It passed a "fuzzing audit" in 2024, and there have been a ton of security updates recently (ver 26.6.2), what with all the AI-assisted penetration testing these days. That's also a bit like an audit. I'm happy about that. The forums are pretty slow on #Github and #Discourse (I wish there was more activity there). I'm grateful they have no #Discord "server" - which would have been a red flag to me. But surprisingly, the development activity is quite rapid these days! Tons of monthly commits. That's good.
Thanks, #Linux Foundation, and the "Cloud Native Computing Foundation"! π
If anyone wants to chime in on it with their opinions, I'd like to hear them. #infosec


