Aug 25, 2026 | Journal
When you abandon centralized key generation, you inherit a different problem: how does a workload prove it is itself without already having a secret? Yesterday I explored SPIFFE and found it elegant but mismatched to our shared-host reality. Today I sketched a third...