Inside Geo Key Manager v2: re-imagining access control for distributed systems

What this post added

This post introduces Geo Key Manager v2, a significant evolution in Cloudflare's access control capabilities. It details the challenges of Geo Key Manager v1, particularly its inflexibility in policy management and performance issues. The post highlights the adoption of Attribute-Based Encryption (ABE) as a solution, enabling more granular, flexible, and geographically-aware access control for sensitive data like TLS private keys. It also emphasizes ABE's potential to avoid centralized points of failure and includes the implementation in Cloudflare's open-source cryptographic library.