https://vo.rs/tags/pki/Latest from the Pki desk at vo.rs.Hugo -- gohugo.ioenThis work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.Sat, 26 Jul 2025 14:57:00 +0000https://vo.rs/story/mtls-between-your-own-services-demystified/<p>Most of my services trusted each other for years for one embarrassing reason: they were on the same network. The metrics collector scraped an exporter because it could reach the port. The backup job pulled a database dump because nothing stopped it. The reverse proxy forwarded to an internal app over plain HTTP because &ldquo;it&rsquo;s only the LAN&rdquo;. Every one of those links was authenticated by geography and nothing else, and geography is a terrible credential.</p>Sat, 26 Jul 2025 14:57:00 +0000