hentication also introduces the concept of Secure Naming to protect from a server spoofing attacks - the client side proxy verifies that the authenticated server&rsquo;s service account is allowed to run the named service.</p><h3 id=key-management-and-distribution>Key management and distribution</h3><p>Istio authentication provides a per-cluster CA (Certificate Authority) and automated key & certificate management. In this context, Istio authentication:</p><ul><li><p>Generates a key and certificate pair for