4 ms·
The standard solution is to use digital keys and signatures. There is no need to reinvent the wheel here, just use the standard cryptographic constructions to v
by soloist11 2y ago
The standard solution is to use digital keys and signatures. There is no need to reinvent the wheel here, just use the standard cryptographic constructions to verify that the requests are from trusted sources, e.g. https://medium.com/@georgwiese/hash-based-digital-signatures-almost-from-scratch-da57e54dd774 https://medium.com/@georgwiese/hash-based-digital-signatures...
- posix_monad 2y agoYes, this is a reasonable approach, but how are certificates deployed and managed? How do we deploy a list of certificates that a service should accept? How do we do certificate rotation and revocation?
- soloist11 2y agoYou can use a configuration management tool but you can also just have a bundled archive that is deployed and extracted with SSH. Here's one example: https://community.chef.io/tools/chef-habitat https://community.chef.io/tools/chef-habitat