microsegment.io

segment all the things

mTLS Is Not A Containment Policy

A trusted workload identity still needs a narrow list of permitted destinations and operations

Mutual TLS authenticates service connections. Breach containment also needs explicit authorization, network boundaries, and tests using valid but unauthorized workload identities.

Posted by Alexander Goller on Tuesday, October 6, 2026

The Service Mesh

What Every Software Engineer Needs to Know about the World's Most Over-Hyped Technology

Whenever you hear people speak about containers and container networking, there is a high chance of the Service Mesh coming up as a topic. It is a real hype and while being on the twitters i discovered this great article by William Morgan of @BuoyantIO, the creator of Linkerd. William does a great job of explaining the technology, the use cases, what to use it for and what not and i have a couple of comments to add:

Posted by     Alexander Goller on Saturday, November 23, 2019

avatar

Principal Solutions Architect, Zero Trust Evangelist, BSD enthusiast

FEATURED TAGS
2026 ai-security attacks breach-containment cisco cloud-security containers containment cyber-resilience hard-truths hybrid-cloud identity identity-security kubernetes lateral-movement links management-plane metrics microsegmentation microservices mitre mitre-attack network-segmentation non-human-identity oauth ot-security ransomware remote-access saas-security segmentation service-mesh supply-chain supply-chain-security third-party-risk vulnerability-management weekly-roundup workload-identity zero-trust