Home / Companies / Vespa / Blog / Post Details
Content Deep Dive

Anonymized endpoints and token authentication in Vespa Cloud

Blog post from Vespa

Post Details
Company
Date Published
Author
Morten Tokle
Word Count
983
Language
English
Hacker News Points
-
Summary

Vespa Cloud has introduced anonymized endpoints and access token authentication to enhance security and streamline deployment processes. Anonymized endpoints, now the default for new applications, conceal application details and expedite certificate issuance, while still supporting the old format for existing applications with backward compatibility. Additionally, Vespa Cloud now supports token-based authentication for data plane access, particularly beneficial for environments where mutual TLS (mTLS) is not feasible, such as Vercel edge runtimes. While mTLS remains the preferred method, token authentication provides an alternative, requiring careful handling of token expiration and storage to maintain security. These updates aim to improve both the security and usability of Vespa Cloud for developers.