<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Brent Toderash</title><description>Writing on web infrastructure, open-source ecosystems, and the craft of reliable software.</description><link>https://toderash.net/</link><language>en-ca</language><item><title>The CMS of the *Future*, Part I</title><link>https://toderash.net/blog/the-cms-of-the-future-part-i/</link><guid isPermaLink="true">https://toderash.net/blog/the-cms-of-the-future-part-i/</guid><description>After 15 years of CMS architecture feeling settled, &quot;the CMS quiet years are over.&quot; AI has made the structural layer *beneath the content* not only matter again, but with increased importance. Across CMS ecosystems, it&apos;s becoming clear: content is the asset, structure makes it usable, and the presentation layer on top is disposable — to the point that many content-consumers will never even see it. Operating below the UI as a consumer of good structure, AI *depends* on this arrangement. AI is now reading the accessibility tree, and it breaks at the points where structure has always been lacking.
</description><pubDate>Tue, 08 Sep 2026 23:00:00 GMT</pubDate></item><item><title>CIRA: Discussing *Digital Sovereignty*</title><link>https://toderash.net/blog/cira-canadian-digital-sovereignty/</link><guid isPermaLink="true">https://toderash.net/blog/cira-canadian-digital-sovereignty/</guid><description>In a recent CIRA panel discussion on digital sovereignty, one panelist seemed to have lost the plot on what digital sovereignty means and why it&apos;s important. I suggest digital sovereignty is a risk mitigation strategy that no enterprise or nation can afford to ignore.
</description><pubDate>Fri, 19 Jun 2026 11:40:00 GMT</pubDate></item><item><title>Open Source is *Not Enough*</title><link>https://toderash.net/blog/open-source-is-not-enough/</link><guid isPermaLink="true">https://toderash.net/blog/open-source-is-not-enough/</guid><description>In response to Joost de Valk&apos;s post saying that open source is the right start but not enough, I suggest some conditions needed for healthy open source projects. Without proper governance and a model that ensures sustainability, a briefcase full of funding could kill a project as easily as stimulating it.
</description><pubDate>Mon, 25 May 2026 00:00:00 GMT</pubDate></item><item><title>Security &amp; Trust in OSS *Supply Chains*</title><link>https://toderash.net/blog/security-trust-oss-supply-chain/</link><guid isPermaLink="true">https://toderash.net/blog/security-trust-oss-supply-chain/</guid><description>Supply chain security ensures you get what you asked for, but not whether what you asked for is safe. Establishing trust in software requires verifiable provenance with cryptographically attributable identity for the publisher.
</description><pubDate>Fri, 22 May 2026 23:00:00 GMT</pubDate></item><item><title>*Kairos*: Being in the Room</title><link>https://toderash.net/blog/kairos-being-in-the-room/</link><guid isPermaLink="true">https://toderash.net/blog/kairos-being-in-the-room/</guid><description>A modest May 2026 gathering in Atlanta felt like a seminal moment for the open source enterprise CMS market in North America, which is currently facing uncertainty and upheaval. TYPO3 is stepping in boldly.
</description><pubDate>Fri, 22 May 2026 00:00:00 GMT</pubDate></item></channel></rss>