4 ms·
I have spent _years_ trying to build things like this and only recently have made some headway. The problem with most solutions in the space is the inherent SPo
by kr3 4y ago
I have spent _years_ trying to build things like this and only recently have made some headway. The problem with most solutions in the space is the inherent SPoF that comes with having them in the access path. As someone that has been woken up in the middle of the night to deal with outages within our access management systems, I _do not_ want the service that is in the path for an incident resolution to be a single point of failure that I then have to debug. Excited to see how this is built, and very excited to see where it goes.
- jmorgan 4y agoSo many teams have told us similar stories: that access is a "tier 1" service (i.e. it can't go down!). Most tools involving a single point of failure end up trading off reliability for security, whereas reliability is of equal (or sometimes even higher) importance to infrastructure & SRE teams. A great book that talks about this is https://sre.google/books/building-secure-reliable-systems/ https://sre.google/books/building-secure-reliable-systems/