E67: Automated Certificate Management with Smallstep

Topics covered
Popular Clips
Episode Highlights
Adoption Journey
Mike Malone, founder of Smallstep, shares the unique journey of their open source project, which was built from scratch to address authentication challenges in distributed systems. He explains that while TLS is a widely used protocol for secure connections, the complexity of certificate management in cloud-native DevOps environments necessitated a new solution 1. This led to the creation of Smallstep's open source project, which aimed to provide a ubiquitous and core infrastructure for certificate management. Malone emphasizes the necessity of open source for widespread adoption, stating, "If we didn't open source this, somebody else would," highlighting the strategic decision to become the de facto solution 2.
  Â
Community Strategies
Smallstep's community engagement strategy focuses on authentic content marketing and leveraging various platforms to foster growth. Mike Malone discusses how they use content to educate and engage the community, testing ideas through content marketing before development to gauge interest and relevance 3. They manage their community through platforms like Discord and GitHub, using tools like Orbit to track engagement. Malone acknowledges the challenges of open source, noting, "Open source is hard sometimes. I refer to it as crappy product led," reflecting the difficulties in measuring community quality without direct user data 4.
  Â
Decision Challenges
Deciding what to keep open source versus commercialize is a complex challenge for Smallstep. Mike Malone explains that their approach is to open source features that align with core infrastructure needs, while enterprise-specific features remain commercial 5. This strategy ensures that essential tools like hardware security modules are accessible to all users, while advanced features for enterprise needs are monetized. Malone admits the difficulty in balancing these decisions, stating, "It's hard. And I don't know that we're 100% perfect at focusing on there," emphasizing the ongoing challenge of maintaining this balance 6.
Related Episodes


E160: Open Source Secrets Management with Infisical
Answers 383 questions

E144: How to Straddle Developers and Security Engineers
Answers 383 questions

E8: Open-Sourcing Business Applications; Calendso's Story
Answers 383 questions

E52: Learnings from Chef & the Future of Open Source
Answers 383 questions

E12: Open-Source Feature Management with Unleash
Answers 383 questions

E90: Building Open Source Startups with Abby Kearns
Answers 383 questions

E54: Learn Open Source Tools & Frameworks on CoRise
Answers 383 questions

E143: Bringing Software Engineering Best Practices to Data
Answers 383 questions

E148: Software Refactoring in the Age of AI
Answers 383 questions

E64: Open Source Data Observability with Elementary Data
Answers 383 questions

E47: Open Source Device Management with Fleet
Answers 383 questions

E57: Secure your Software Supply Chain with Chainguard
Answers 383 questions

E33: Evidently AI and Open Source Machine Learning Monitoring
Answers 383 questions

E26: Cube.dev - Open Source Headless BI for Building Data Apps
Answers 383 questions
