Anonymized endpoints and token authentication in Vespa Cloud
Blog post from Vespa
Vespa Cloud has introduced anonymized endpoints and access token authentication to enhance security and streamline deployment processes. Anonymized endpoints, now the default for new applications, conceal application details and expedite certificate issuance, while still supporting the old format for existing applications with backward compatibility. Additionally, Vespa Cloud now supports token-based authentication for data plane access, particularly beneficial for environments where mutual TLS (mTLS) is not feasible, such as Vercel edge runtimes. While mTLS remains the preferred method, token authentication provides an alternative, requiring careful handling of token expiration and storage to maintain security. These updates aim to improve both the security and usability of Vespa Cloud for developers.