News for hackers. Stuff that matters.

A comment on BeyondCorp: How Google Ditched VPNs for Remote Employee Access. Parent comment

Re:BeyondCorp: How Google Ditched VPNs for Remote Employee A... by e12e on Monday January 22, 2018 @05:46PM (#16208804)
> A lot of this discussion glosses over the fact that U2F really makes this a viable system. U2F solves the MITM problem and ensures that the anyone who logs in (…)

Makes viable: certainly; solves: not so sure. Session hi-jack doesn't magically cease to be a problem.

[ Parent | on HN ]
Re:BeyondCorp: How Google Ditched VPNs for Remote Employee A... by nine_k on Monday January 22, 2018 @07:50PM (#16209784)
It becomes much less of an issue if the connection is re-negotiated periodically, and a new key may require a physical action (touch) from the key generator.
[ Parent | on HN ]