3 ms·

We are trying to change that with OpenZiti - https://openziti.io/ https://openziti.io/. Its an open source network overlay built with zero trust principles and

• otabdeveloper4 2y ago
  It's a complex problem that hasn't even been formulated properly yet. For example, every existing solution touts "security" and yet completely mangles the difference between authentication and encryption. Authentication is important - you don't want random servers or users to enroll on your network, and you want good tools to rotate and manage secrets. Encryption isn't important unless you care about state-level actors sniffing your traffic at the backbone. (And if you care about that then you already have your own datacenter.) Meanwhile encrypting all network traffic is a huge performance penalty. (Orders of magnitude for some valid use cases.)