> OpenZiti is more like a pipe with credentials That's a better way to think about it, I can see that. The idea of authorizing before connect to an open, liste

> OpenZiti is more like a pipe with credentials That's a better way to think about it, I can see that. The idea of authorizing before connect to an open, listening port is great, but not having a listening port at all in your app is so much more powerful imo. It makes it all that much harder for worms and ransomware and the like to propagate when there are no listening ports to attack. OpenZiti uses a full TCP stack in the tunneling apps - the agent-like things you would install for brownfield type of things but for app embedded zero trust it doesn't need any of that.