Tag archive
If you run SPIRE, are you SPIFFE compliant? How far do you have to go with a custom implementation? I read the spiffe/spiffe spec end to end and pulled out the MUST requirements for SPIFFE-ID, X.509-SVID, JWT-SVID, Workload API, and Trust Bundle.
Omega is a v0 control plane that ships SPIFFE-compatible workload identity and an OpenID AuthZEN 1.0 PDP (Cedar) in one Apache-2.0 binary.
On March 2, 2026, four engineers from Defakto Security, AWS, Zscaler, and Ping Identity published...
Workload identity has become a foundational primitive in modern infrastructure. Static credentials do...
We take a source-code level deep dive into the internal implementation of SPIFFE/SPIRE, the standard for 'Workload Identity' in the cloud-native environment.