agent
and the Istio agent into a single binary, which means we no longer require
configuration of a <code>PodSecurityPolicy</code>.</p><p>The improvements don&rsquo;t stop there. We no longer need to mount certificates on
every pod nor have to restart Envoy when certificates change. Certificates are
delivered directly from Istiod to every pod. And whats more, each pod gets a
unique certificate.</p><p>Look for blog posts in the coming days for a deeper dive on Istio security and
the threats that it helps mit