Security

• TLS
  • Underlying implementation
  • FIPS 140-2
  • Enabling certificate verification
  • Certificate selection
  • Secret discovery service (SDS)
  • OCSP Stapling
  • Authentication filter
  • Custom handshaker extension
  • Trouble shooting
• JSON Web Token (JWT) Authentication
• External Authorization
  • Service Definition
• Role Based Access Control
  • Policy
  • Shadow Policy
  • Condition
• Threat model
  • Confidentiality, integrity and availability
  • Data and control plane
  • Core and extensions
• External dependencies
  • Data plane (core)
  • Data plane (extensions)
  • Control plane
  • API
  • Observability (core)
  • Observability (extensions)
  • Build
  • Miscellaneous
  • Test only
• Google Vulnerability Reward Program (VRP)
  • Rules
  • Threat model
  • Execution environment
  • Objectives
  • Working with the Docker images
  • Rebuilding the Docker image