Re:BeyondCorp is dead, long live BeyondCorp
by Spivak on Saturday February 12, 2022 @11:56AM
(#30314210)
1) DRM absolutely improves appsec, one of the main things it does it allows you to ensure that the client software is running your unmodified code and protected from the OS.
2) Okay but a web client will get you 80% the way there.
3) Yes/No. Netflix doesn’t but that’s because Google does it for them for Widevine deployments.
4) Widevine has three, pretty complex, policy levels. No reason there couldn’t be more. Plus device authentication is just a metric used in authorization decisions. Nothing is stopping you from having arbitrarily complex authz.
2) Okay but a web client will get you 80% the way there.
3) Yes/No. Netflix doesn’t but that’s because Google does it for them for Widevine deployments.
4) Widevine has three, pretty complex, policy levels. No reason there couldn’t be more. Plus device authentication is just a metric used in authorization decisions. Nothing is stopping you from having arbitrarily complex authz.