WIT Happens: Exploring the Latest Evolution of the SPIFFE and... Noah Stride & Arndt Schwenkschuster

This talk explores the latest evolution of the Workload Identity Token (WIT) standards, presented by Noah Stride from Teleport and Arndt Schwenkschuster from Defakto Security. The session provides an overview of SPIFFE and the IETF WIMSE Working Group's efforts to standardize WIT as a new credential format, addressing gaps in current workload-to-workload authentication. The speakers recap existing credential types, including JWT and X.509, and examine the structure, security properties, and presentation methods of WIT. Additionally, they demonstrate the use of WIT for workload authentication, making this session valuable for anyone interested in workload identity and the SPIFFE framework.