News for hackers. Stuff that matters.

A comment on I read the federal government’s Zero-Trust Memo so you don’t have to. Parent comment

Re:I read the federal government’s Zero-Trust Memo so you do... by Sesse__ on Thursday January 27, 2022 @01:22PM (#30104104)
It authenticates the user to the service, but not the service to the user, so it's vulnerable to phishing (or MITM, of course, if you don't have TLS).
[ Parent | on HN ]

There are no comments on this comment yet.