alexfornuto

4 ms·

1.
Q&A with NIST's Zero Trust Architecture Writers(pomerium.com)
6 points by alexfornuto 5y ago|0 comments
2.
Cert-Manager with Pomerium Ingresses(cert-manager.io)
2 points by alexfornuto 5y ago|1 comments
3.
by alexfornuto 5y ago
Cert-Manager recently published a tutorial I wrote! It explains how to integrate cert-manager with the Pomerium Ingress controller for Kubernetes, so your services get staging or production certificates.
4.
by alexfornuto 5y ago
If your organization can support provisioning and managing certs for end users, you can do that too ( https://www.pomerium.com/guides/mtls.html ). This is talking about the connection between the identity-aware proxy (Po
5.
by alexfornuto 5y ago
Mutual authentication is a big component of Zero Trust. Setting up client certificates for all your end users may not be feasible, but mTLS between Pomerium and upstream services definitely is.
6.
Upstream mTLS with Pomerium(pomerium.com)
3 points by alexfornuto 5y ago|3 comments
7.
by alexfornuto 5y ago
In the U.S. it's illegal to ask an applicant's age, so you've got potential legal recourse against both of the companies in your examples.
8.
by alexfornuto 5y ago
Mutual authentication is a complex and deep subject in cybersecurity, but it’s also an important aspect of zero trust. That’s why I wrote this doc, explaining the concept and several practical examples across different network layers and co
9.
Mutual Authentication – What it is and how to do it(pomerium.com)
2 points by alexfornuto 5y ago|1 comments