Hinting hard

[kfox1111]

Was digging through an existing code trying to add a hint to it. Its twisty.

Seems like there are multiple ways of getting svids and don't have hint options.

For example, I traced through through to here, which hardcodes just grabbing the first one found:
https://github.com/spiffe/go-spiffe/blob/main/v2/workloadapi/client.go#L76

[kfox1111]

Ok... I think part of the problem with this, is there are two ways to do hinting....

1. getting all the svids, then filtering by the hint
2. asking the agent for the svid with the hint.

The latter is arguably more secure, as you're not handling sensitive things you don't need, as well as performing slightly faster.

I don't see much support for 2 though in the library.

I think 1 is possible.