3 ms·
I'll just say I work at a large SF unicorn where we do this. We're not at 100% (getting anything to 100% when you're big enough is impossible), but the vast maj
by stouset 7y ago
I'll just say I work at a large SF unicorn where we do this. We're not at 100% (getting anything to 100% when you're big enough is impossible), but the vast majority of everything is behind TLS 1.2 with unique certificates per server/app pair.
We're hoping to use SPIFFE/SPIRE to bring adoption even higher.
- notyourday 7y agoI'm very impressed. I have only seen this in one place. It was a very old school brokerage and even they were running that over IPSEC network