Group alias: [istio-security@googlegroups.com](istio-security@googlegroups.com)

Istio Security SIG and sub workgroups:

*   Istio Security SIG
    *   Leads: Wencheng Lu (Google), Etai Lev-Ran (IBM)
    *   [Meeting notes](https://docs.google.com/document/d/12Xz8fCuql2tPL-cpdLXGGE44kYT4o9NB6mljSiS_01U)
    *   Scopes:
        *   General Istio security topics across all sub workgroups, like Istio 0.3 security tasks.
        *   Topics not covered by each sub workgroups, like ingress/egress, security threat model, etc.
        *   Topics cross other groups like networking, environment, integration, etc.
        *   Each sub workgroup will recap their work.

*   Sub Workgroup: Workload Identity
    *   Leads: Tao Li (Google), Etai Lev-Ran (IBM)
    *   [Meeting notes](https://docs.google.com/document/d/1hCTzs5TthjKM42RlMT7SkCHWEU68LhomQLYTWX46ZAU)
    *   Scopes: Identity delivery, x509 key/cert issuance/rotation, node agent, CA, identity registry.

*   Sub Workgroup: Security Policy
    *   Leads: Limin Wang (Google), Spike Curtis (Tigera)
    *   [Meeting notes](https://docs.google.com/document/d/1-Z7nSDV8f9psp5chO6H9PAUAinIVapOhQRaUIxbf0dk)
    *   Scopes: describe policy for authentication, authorization, auditing, encryption, privacy.

*   Sub Workgroup: End-user Authentication
    *   Leads: Lizan Zhou (Google), Luke Camery (Google)
    *   [Meeting notes](https://docs.google.com/document/d/1RVGTqUUF0ntEARRYP6u_2PJBKs9GTnxfEQDjnviIUD0)
    *   Scopes: enduser auth token validation, enduser identity service, delegation, auth token exchange service.
