#spiffe

Watch Workload Identity in the Kernel (Not the Sidecar)

SPIFFE and SPIRE: Why Your Software Needs to Prove Who It Is

Some of the most powerful identities never log in.

SPIFFE: Why Google’s New Agent Identity is the Future of AI Security

AI agents are everywhere. As we move deeper into 2026, the tech world is shifting from simple chatbots to autonomous agents that can browse…

Remote-Brokered Back Channel HITL: A Secretless Authorization Foundation for AI Agents

The Gap

Zero-Trust Service Identity on EKS: A Deep Dive into SPIFFE, SPIRE, and Istio

What I Learned Building a Production-Grade Workload Identity System — and Every Mistake That Taught Me Something

The Blueprint of Trust: How SPIFFE and SPIRE Solve the Identity Crisis in Modern Infrastructure

Tuesday Morning Threat Report: Mar 31, 2026

Where the news is always bad, but the analysis is always good.

Implementing SPIRE Node Attestation with PKCS#11

Background

Bringing SPIFFE Identity to GitHub Actions — Building a SPIRE Plugin

Introduction

Authenticating GitHub Actions Workflows with SPIRE using OIDC Tokens

Introduction

What Enterprise-Grade Authorization for MCP Should Look Like

Part 3 in the series “Securing the Future of AI Agents: AuthN & AuthZ in the Model Context Protocol”

Why MCP Authorization is a Non-Starter for Enterprises

Part 2 of “Securing the Future of AI Agents: AuthN & AuthZ in the Model Context Protocol”. Read Part 1 here

Embracing modern identity with SPIFFE and HashiCorp Vault: a Macquarie Bank journey

By David Farr, Lead Engineer in Secrets Management, Macquarie Bank