Tag: Zero Trust

All the articles with the tag "Zero Trust".

• 

  SPIFFE/SPIRE: cryptographic workload identity instead of static secrets

  26 Aug, 2026

  SPIFFE standardizes workload identity through short-lived SVID certificates, and SPIRE — its reference implementation — issues and rotates them via two-tier attestation (node + workload) with no pre-shared secret anywhere. We break down how it differs from external-secrets-operator, how federation works across clusters, and deploy SPIRE to fetch a real X.509-SVID for a test pod.

• 

  The Intervals.icu MCP server in Claude, behind Pomerium

  14 Jun, 2026

  How we connected the Intervals.icu MCP server to Claude and locked it behind Pomerium auth. Plus: how to build a dedicated Claude project and turn it into a personal coach with instructions.

• 

  NetBird: A Modern Zero Trust VPN

  12 Sep, 2025

  NetBird is a modern self-hosted Zero Trust VPN built on WireGuard: peer-to-peer connections, automatic NAT traversal, and simple access control with no single point of failure.

• 

  Cloudflare Zero Trust

  5 Jan, 2025

  Set up secure access to self-hosted services with Cloudflare Zero Trust and Tunnel: no open ports, with authentication and access policies built in.