Re:I read the federal government’s Zero-Trust Memo so you do...
by shadowgovt on Thursday January 27, 2022 @01:58PM
(#30104603)
> If only specific builds of software that are on a vendor-sanctioned allowlist
Yes, but for government software this is a bog-standard approach. Not even "the source code is publicly viewable to everyone" is sufficient scrutiny to pass government security muster; specific code is what gets cleared, and modifications to that code must also be cleared.
Yes, but for government software this is a bog-standard approach. Not even "the source code is publicly viewable to everyone" is sufficient scrutiny to pass government security muster; specific code is what gets cleared, and modifications to that code must also be cleared.