News for hackers. Stuff that matters.

A comment on I Read the Entire Cybersecurity Executive Order; Here's What You Need to Know. Parent comment

Re:I Read the Entire Cybersecurity Executive Order; Here's W... by grumblenum on Wednesday June 16, 2021 @02:23PM (#27531765)
That appears to be for consumers of federal government web services, which I would not expect to prevent large breaches. The service itself would be a massive single point of failure, and I'm not sure how it would prove a contractor has ZTA, or whatever an administrator thinks that means, all the way down.
[ Parent | on HN ]
Re:I Read the Entire Cybersecurity Executive Order; Here's W... by toomuchtodo on Wednesday June 16, 2021 @03:59PM (#27532796)
It alone is not a silver bullet for ZTA, but authn and authz are critical components of ZTA. Most are not good at auth*, should not roll their own, and absolutely should delegate to a service that provides this functionality (commercially, you see this with Okta and Auth0, for example).
[ Parent | on HN ]
Re:I Read the Entire Cybersecurity Executive Order; Here's W... by pimlottc on Wednesday June 16, 2021 @04:04PM (#27532850)
While primarily targeted at the public, login.gov is used for some internal gov sites as well.
[ Parent | on HN ]