How deeply does Google Anthos in Action cover certification authority?

Defines certificate trust and explains self-signed, administrator-specified, and delegated CA configurations.

Certification authority

A certificate authority is a trusted entity that issues and signs digital certificates.

A certification authority (CA) is a trusted entity that issues digital certificates, binding named subjects to public keys so others can trust corresponding private-key signatures. In an Istio service mesh, the CA provisions strong identities for workloads and supports a zero-trust security posture. section 4.3.3

Istio supports several CA deployment arrangements:

Generate a self-signed root certificate and key by default, then use them to sign microservice certificates. section 4.3.3
Supply an administrator-specified certificate and key together with an administrator-specified root certificate. section 4.3.3
Delegate certificate signing to a subordinate CA when organizational responsibility for the root certificate remains separate. section 4.3.3

Enterprise mesh deployment

An enterprise can configure Istio’s CA with an existing root certificate or a delegated CA signing certificate and key, rather than relying on the default self-signed root. section 4.3.3

How Google Anthos in Action covers it

liveBook manning.com

Read Google Anthos in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Real-World CryptographyA certificate authority is an entity that issues and digitally signs certificates binding public keys to identities or domains.
liveBook manning.com

Software Security for DevelopersA local certificate authority is a privately operated certificate authority that issues certificates within an organization's or development environment's trust boundary.
liveBook manning.com

ASP.NET Core in Action, 3eA certificate authority is a trusted entity that issues or signs digital certificates to attest to the identity of certificate holders.
liveBook manning.com

Learn PowerShell Scripting in a Month of Lunches, Second Edition: Write and organize scripts and toolsA certificate authority is a trusted entity that issues and signs digital certificates after validating certificate requests.
liveBook manning.com

Logs and TelemetryA certificate authority is a trusted entity that issues and validates digital certificates and maintains their revocation records.
liveBook manning.com

Build Python Web Apps with StreamlitA certificate authority is a trusted entity that validates identities and digitally signs certificates for them.
liveBook manning.com

Acing the CCNA Exam: Volume 2 Advanced Networking and SecurityA certificate authority is a trusted entity that issues and verifies digital certificates.

Compare how 8 books explain certification authority →

Related concepts

certificateproduces · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.
public-key infrastructureused by · Public-key infrastructure is a framework of authorities, certificates, keys, policies, and procedures for establishing and managing public-key trust and digital identities.
domain ownershipuses · Domain ownership is the assignment of responsibility for a business domain’s data, including its meaning, structure, quality, documentation, and governance, to the domain that produces it.
root certificateincludes · A root certificate is a trusted certificate, typically self-signed, that serves as a trust anchor for validating a certificate chain and authorizing subordinate certificates.
intermediate certificateincludes · An intermediate certificate is a certificate issued by a root or higher-level certificate authority to establish a trust chain for end-entity certificates.

This explainer was generated by Manning's knowledge graph from the text of Google Anthos in Action. The section links point to the parts of the book it draws on.