Protect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical...
summary
OpenZiti demonstrates embedding a zero‑trust SDK (Go, C, C#, Python, Java) into apps so identity‑to‑identity overlays replace IP/port exposure, removing listening ports and stopping port‑scans. It uses a controller + edge routers, mutual mTLS and libsodium ChaCha20‑Poly1305 for end‑to‑end encryption, supports third‑party CAs/SPIRE, and enforces deny‑by‑default policies. Worked examples: ZSSH (SSH off the Internet), a JDBC wrapper for DB tools, Prometheus instrumented with the Go SDK, KubeZidel/Helm Z for dark Kubernetes, and GitHub webhook zedification; mitigates CVSS 9.8 style remote scans.
AI-written summary · about
chapters (12)
- 0:00Start
- 2:09What Is Zero Trust
- 2:56Basic Overview of a Network
- 4:56Https Everywhere
- 5:44Certificate Authority
- 6:50How Vpns Work
- 8:27Device Identity
- 10:54Overlay Network
- 20:32Port Inference
- 22:41Open Zd Test Kitchen
- 32:28Private Authenticated Authorized Dns
- 34:21Foundations of Zero Trust
related talks
01h 02mIntroduction to Zero Trust Security
29mZero Trust for APIs: From Edge to Mesh with Istio
17mZero Trust access with zero waiting, zero pain, and zero compromises
45mZero Trust: Getting to Step One..and What to Do When You Get There
37mZero Trust at the Edge: Bridging Industrial Systems With Verifiable Credentials and OpenZiti
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security
19mKeynote: Demystifying Secure Application Communication with Zero Trust: Identity, Integri...