News for hackers. Stuff that matters.

A comment on Down the Cloudflare / Stripe / OWASP Rabbit Hole: A Tale of 6 Rabbits Deep. Parent comment

Re:Down the Cloudflare / Stripe / OWASP Rabbit Hole: A Tale ... by robertlagrant on Monday February 20, 2023 @05:05PM (#34873581)
Cert renewal is why it's not used everywhere, I think. While OAuth2 / client credentials is complicated, at least .jwks endpoints make cert rotation easy.
[ Parent | on HN ]
Re:Down the Cloudflare / Stripe / OWASP Rabbit Hole: A Tale ... by gz5 on Tuesday February 21, 2023 @11:12AM (#34882772)
yes, can be tricky, as you state. see above for the openziti approach.
[ Parent | on HN ]