4 ms·
Just going to say that this is the kind of scenario I was discussing in https://mjg59.dreamwidth.org/59353.html https://mjg59.dreamwidth.org/59353.html . RFC 87
by mjg59 5y ago
Just going to say that this is the kind of scenario I was discussing in https://mjg59.dreamwidth.org/59353.html https://mjg59.dreamwidth.org/59353.html . RFC 8705 actually provides a mechanism for dealing with this, so I guess I'm going to be trying to implement that for our infrastructure in the near future.
- ec109685 5y ago“A lot of services will verify the user, and then issue an oauth token that'll expire some time around the heat death of the universe” mTLS is definitely an excellent step towards solving this.
- pm90 5y agoConvincing orgs to use mtls can be difficult although perhaps incidents like this one will generate more interest.
- CaliforniaKarl 5y agoFor people looking for the HN discussion on the above-linked blog post: https://news.ycombinator.com/item?id=30916192 https://news.ycombinator.com/item?id=30916192