Securing Every Bit at Uber - Transparent Encryption and Authorization Implementation

This conference talk explores Uber's security transformation journey, detailing how they achieved 100% coverage of encryption, authentication, and authorization across their diverse technology stack in just two years. Learn how David Bell and Ronak Jain tackled the challenge of implementing consistent security baselines across dozens of programming languages, frameworks, and off-the-shelf software while maintaining service owner autonomy. Discover how Envoy played a crucial role in enabling this transformation by transparently securing billions of connections. The speakers share valuable operational insights from the development and deployment phases, as well as lessons learned during the first year after fully implementing the security solution across Uber's infrastructure.