Please note all session times are listed in Irish Standard Time (IST), UTC +1. To view the schedule at your preferred time, please choose your location on the right-hand navigation panel under ’Timezone’.
Trust is a key issue in any network, but is perhaps of paramount importance in blockchain networks. It is so crucial, in fact, that "Trust" and its derivatives are mentioned no less than 14 times in Satoshi's seminal Bitcoin whitepaper. Hyperledger Fabric networks are no exception; in Fabric, trust flows from the Certificate Authorities (CAs) to every participant on the network who utilize that trust to transact according to their role. Operating these CAs properly, then, is central to the trust and security model of Fabric. In this discussion, Alex will reinforce why using centralized PKI generators (such as cryptogen) presents a trust risk for production networks. Corsha's experiences with the Fabric CA will also be discussed, and why it was ultimately decided that the operational overhead of that system made ongoing maintenance challenging. Alex will introduce the cert-manager project and go over how Corsha integrated that with their Kubernetes-native Hyperledger Fabric networks. Finally, Alex will propose a Fabric network architecture that does not rely on a trusted setup and does not require any CA servers, with fully automated certificate management.
Alex is Corsha's Head of Infrastructure, and is responsible for ensuring that Corsha's products are built and deployed using the latest possible Infrastructure as Code techniques. He has recently worked on managing the trust relationships of Corsha's various Kubernetes-based Hyperledger... Read More →
