Zero Trust: From Airports to Identity-Aware Proxies
summary
Argues that shifting checks to an Identity-Aware Proxy at layer 7 forces policy evaluation on every request, preventing perimeter collapse; cites ~2.8 million VPN IPs being attacked as evidence perimeter security fails. Shows microsegmentation as resource-level zoning versus coarse VPN subnets and demos a Bolt New web app behind the proxy (demo mostly skipped but described). Recommends an assessment → pilot → expand path, notes proxies can front legacy apps and Kubernetes APIs and adds device posture and timebased policies.
AI-written summary · about
chapters (11)
- 0:00Introduction and Personal Anecdote
- 0:17Overview of Zero Trust Security
- 1:40Speaker Background and Relevance
- 2:25Why Zero Trust Matters
- 3:29Problems with Perimeter-Based Security
- 6:17Airport Security Analogy for Zero Trust
- 9:31Core Principles of Zero Trust Security
- 15:00Identity Aware Proxy (IAP) Explained
- 18:23Benefits for Legacy Systems
- 19:27Implementation Path and Kubernetes
- 21:09Key Takeaways and Conclusion
related talks
19mZero Trust: From Airports to Identity-Aware Proxies
35mDefense Through Invisibility: Zero Trust Security for the Enterprise
27mLeveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure
02h 48mZero Trust: the new normal!
20mTrust by verify - how to provide secure access to your team
38mIdentity Based Segmentation for a ZTA
40mClarifying Zero Trust: The Model, the Philosophy, the Ethos
40mZero Trust, Zero Pain: A Practical Implementation with Intrinsic Security