This blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post covered how Auth Service signs the mesh identity token that carries a user through...

This blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous posts covered what the architecture does and why each layer exists. This post covers wh...

This blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post traced one request's identity flow from gateway to database. It left one piece une...

This blog is a part of the Zero-Trust Security on Istio Series, if you haven't read the previous article, please do, it will provide better context. The previous post laid out the five security layers as a static architecture. This post follows a si...

Service Mesh Zero-Trust Architecture Zero-trust is a property that emerges when several independent checks each verify a request on their own, without assuming the layers around them already did the work. It often gets described as a product you in...