Authenticating Microservices Using HTTPS/SSL
summary
Describes using HTTPS/SSL certificate exchange to authenticate microservices and micro-apps in the Cielo LIO payments platform. Covers challenges of that SSL-based approach, how HTTP clients like OkHttp handle SSL, and customizations to improve security in service-to-service communication.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 5:30Certificates and private keys
- 12:16Certificate trust chain
- 22:47HTTPS certificate exchange
- 24:32Client certificates
- 30:38Microservice authentication with HTTPS
- 37:29Environment and partner segmentation
- 41:02Cloud certification infrastructure
- 42:33Q&A
related talks
51mAppSec and Microservices
38mTop 10 Security Best Practices to secure your Microservices
34mHTTPS and mobile apps: the story of one implementation or how a fly became an elephant
41mSecurity Patterns for Microservice Architectures
23mMicroservice Security at the API Level
23mHow to Secure Microservices Without Traditional Firewall
13mService Authentication - Tokens or Certificates?
28mService Identity - The Key to Zero Trust with Service Mesh