BSidesSF

With the advent of micro service architecture securing inter-service communication has become more important than ever. Protecting these connections over HTTPS is usually the default approach, but poorly implemented solutions can lead to under protected services or cause outages within the system. This talk looks to highlight how bad practices, misunderstandings and design choices in certificate trust chains can leave a system vulnerable or even offline.