BeyondCorp is dead, long live BeyondCorp

Re:BeyondCorp is dead, long live BeyondCorp by lupire on Friday February 11, 2022 @08:19PM (#30309019)

The poorly explained point is that your users don't have 2 trusted devices at once, so if you don't like the device the user is using, there is nothing they have that you will like better, so there is no point in having one device vouch for a other, or splitting trust/privileges among two devices for the same user.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by jeffbee on Friday February 11, 2022 @09:05PM (#30309232)

Wait, that's what that passage is supposed to mean? It does not seem obviously correct to me. Why can I not enroll several trusted devices?

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by refulgentis on Friday February 11, 2022 @09:46PM (#30309456)

You can. There's a focus on verbosity that's hiding the core of "many googlers only have one device!". I don't understand what the authors getting at though, its a non-issue at Google and they should know that? Trivially, let's say that a clear workaround is having a help desk for this situation that doesn't require device trust

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by joshuamorton on Friday February 11, 2022 @09:07PM (#30309240)

Also many/most users with a laptop do have a second trusted device: a phone.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by danans on Saturday February 12, 2022 @12:46AM (#30310316)

The second trusted device is a USB FIDO key. No second computer is needed.

[ Parent | on HN ]