Today we dive into the challenges of securing modern IT infrastructures, focusing on "Secret Zero" and its implications for authentication practices. Our guest, Mattias Gees of Venify, discusses the SPIFFE framework and its role in transitioning from traditional security methods to dynamic workload identities. We explore practical strategies for implementing SPIFFE to enhance digital security across cloud environments. Join us for a comprehensive look at evolving cybersecurity measures and the future of identity management. Show Notes: Mattias Social Links Linkedin - https://www.linkedin.com/in/mattiasgees/ Twitter (X) - https://twitter.com/MattiasGees You also might like our episode with Uri Sarid - https://www.youtube.com/watch?v=reKbGE1c5Ig Introduction: 0:00 What is secret zero: 1:39 Why is machine identity so hard: 4:15 The machine identifies vs user identities: 11:06 What is SPIFFE? (Secure Production Identity Framework for Everyone): 14:20 SPIFFE fundamentals/architecture: 17:15 GitGuardian: 20:08 How to implement SPIFFE: 21:00 Why we aren't leveraging identify best practices: 26:40 Will SPIFFE be the future? 27:27 Secrets Managers vs SPIFFEE: 31:05 Venify and identify management: 32:38 Best and worst security advice: 38:28 Wrap up: 41:00