"mTLS: When certificate authentication is done wrong"

https://github.blog/2023-08-17-mtls-when-certificate-authentication-is-done-wrong/

#security #infosec #mtls

How to configure mTLS using SPIRE and Envoy » https://www.youtube.com/watch?v=7qANSe9ajbE

#zerotrust #spiffe #SPIRE #Envoy #mTLS #security

#Debugging #mTLS issue is the worst

Potentially #controversial thought: Not everybody needs #mTLS within their #Kubernetes clusters.

Is your decision to deploy mTLS based on a (realistic) threat model? Are you aware of its cost?

Mutual TLS (#mTLS) authentication is a way to encrypt services traffic using certificates

https://istiobyexample.dev/mtls/

Secure your application traffic with Application Gateway mTLS

Rajesh Nautiyal, Senior Technical Program Manager ishappy to share that Azure Application Gateway now supports mutual transport layer security (mTLS) and online certificate status protocol (OCSP). Here, he is covering what mTLS is, how it works, when to consider it, and how to verify it in Application Gateway.

read more here: https://azure.microsoft.com/de-de/blog/secure-your-application-traffic-with-application-gateway-mtls/

#Microsoft #Azure #mTLS #OCSP

Is it possible to install a client TLS client certificate on an iPhone running iOS 16?

I'm trying to do it but can't get it to show the certificate as verified (even though the Root and Intermediate CAs are both installed, verified and fully trusted).

Really want to leverage mTLS. I've had it working on an iPhone before (a couple of years ago, I think), but not sure if it's possible any longer.

#tls #https #smallstep #stepca #mtls #https #iphone #ios #apple #infosec

I blogged about using #ACME to automatically, securely, and reliably protect all your workload connections with #mTLS and achieve authenticated End to End Encryption #E2EE :

https://blog.daknob.net/workload-mtls-with-acme/

Using SPIRE to Securely Connect Workloads

This video series will guide you through establishing a secure cross-cluster mTLS connectivity between workloads across multiple clusters using SPIRE. We will start with a blank slate, and make as little assumptions as we can along the way.

https://www.zerotohero.dev/spire-mtls/

#ZeroToHero #spiffe #spire #federation #Kubernetes #CrossCluster #mtls

mTLS is my nemesis. Let’s walk through it so it’s easier to understand https://youtu.be/7uLzYsEJrSE.
#kafka #security #mtls