security
SPIFFE
Secure Production Identity Framework for Everyone
Definition
SPIFFE is an open standard for workload identity that provides cryptographically verifiable identities (SPIFFE IDs) to software services regardless of where they run. SPIFFE IDs are expressed as URIs (e.g., spiffe://example.com/service/payments) and delivered via X.509 certificates or JWTs.
It solves the 'secret zero' problem by giving workloads an identity without pre-shared secrets.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.