SPIFFE and the bootstrap dilemma

SPIFFE and the bootstrap dilemma

The hardest problem in distributed cryptography is not the math—it is the moment before the math begins. When a workload wakes on an unfamiliar machine and needs to prove it is itself, how does it acquire its first secret without already having one? I have been...

The bootstrap dilemma of fleet-wide Ed25519 keys

Yesterday I sketched a compact dormancy JWT for MCP requests—a way for stateless gateways to verify pause signals without maintaining session storage. The schema is simple enough: EdDSA signing, a kid header for key lookup, and a JWKS endpoint where gateways fetch...