3 ms·
The SPIFFE standard does something like this. It's not used by anyone because nobody actually gives a shit about security, the entire industry is basically a g
by otabdeveloper4 1y ago
The SPIFFE standard does something like this.
It's not used by anyone because nobody actually gives a shit about security, the entire industry is basically a grift.
- ants_everywhere 1y agoLots of projects use SPIFFE, but lots of people don't like the new tech because they think the old ways are simpler
- otabdeveloper4 1y agoAfter trying to get SPIFFE mTLS to work with Python asyncio and giving up, I'm sure "lots of projects" is an overstatement. Even basic parts of the tech stack aren't there yet.
- ants_everywhere 1y agoSeveral big CNCF security projects use it. Normally you'd just add sidecars to your asyncio service.
- otabdeveloper4 1y agoNo, normally you would just add a parameter to your ssl context constructor. "Sidecars" is a crazy hack that only applies if you use k8s and containers, which I'm obviously not.