BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.all-systems-go.io//8XRBTA
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-all-systems-go-2026-8XRBTA@cfp.all-systems-go.io
DTSTART;TZID=CET:20260930T101500
DTEND;TZID=CET:20260930T104000
DESCRIPTION:IETF is standardizing a new ACME challenge\, `device-attest-01`
 \, which allows organizations to provision device bound certificates to ma
 chines\, and enables machines to present signing certificates that can't b
 e extracted out of machines they where intended for. This is useful for ca
 ses where you want to provide reverse proxies with mTLS with a strong sens
 e of device identity.\n\nattezt is intended to be a suite of tools to work
  the new `device-attest-01` ACME challenges for Linux. It provides an ACME
  client\, an attestation server with (simple) support for inventory system
 s and a PKCS11 agent which together enables the support of this ACME chall
 enge on Linux.\n\nThis talk will give an introduction to the new ACME chal
 lenge\, a quick rundown of how an attestation server works and how attezt 
 works.\n\nhttps://datatracker.ietf.org/doc/draft-ietf-acme-device-attest/\
 nhttps://github.com/Foxboron/attezt
DTSTAMP:20260710T230128Z
LOCATION:Galerie
SUMMARY:attezt: device attestation\, PKCS11 and ACME - Morten Linderud
URL:https://cfp.all-systems-go.io/all-systems-go-2026/talk/8XRBTA/
END:VEVENT
END:VCALENDAR