Zero Trust: Security Without Boundaries
summary
Argues that perimeter defenses are inherently breakable and replaces them with cryptographic, identity-first controls; demonstrates the CNCF standard SPIFFE and its reference implementation Spire and how a Spire server → agent → workload flow issues short‑lived credentials so two services mutually authenticate and open an encrypted channel. Claims three years of implementation work, targets cloud and high‑security use cases, and offers a free SPIFFE book and community links for hands‑on adoption.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 0:56Zero Trust
- 1:27Perimeters can be broken
- 1:42Perimeters limit options
- 1:57Individual authentication
- 2:12Encryption and authenticating
- 2:57Spiffy Inspire
- 3:27Aspire Server
- 3:42Workload Data Station
- 4:12Who is Daniel Feldman
- 4:27Zero Trust is important
- 4:42Security requirements
- 4:57Free book
- 5:12Spiffy
related talks
36mFederated Identity for Distributed Systems: Understanding SPIFFE
41mZero-Trust Networks: Identity, AuthN, AuthZ, Audit
41mSPIFFE Project Intro
36mIntroducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I]
30mIntro: SPIFFE
23mThe Long and Windy Road that leads to Cloud Native Security
19mFederate, Scale, and Secure: Practical SPIFFE/SPIRE for Containers...
34mSecuring Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE