Hacker News Reader

This is great for "people" accessing server resources but not so much for automation / API access.

Why can't the "Uberproxy" (in Google terms) consume Authentication mechanisms like spiffe[1] certificates and allow access to protected resources via those?

Theres no reason a BeyondCorp architecture needs to make automation or API access harder?

[1] - https://spiffe.io/

Because for Google it's not enough that you have a certificate if your client is using an old unpatched OS and is potentially vulnerable.

Quite the opposite.

Reply on news.ycombinator.com