Re:Unpacking the Benefits of Zero Trust Architecture as Defi...
by HyperSane on Friday February 17, 2023 @09:32PM
(#34843250)
Zerotrust makes perfect sense. It takes the default deny firewall policy and applies it to every host. Entities can only communicate after proving their identities to each other and every single packet is authenticated. When done correctly every host could be completely open to the internet without any security issues.
[ Parent
| on HN ]
Re:Unpacking the Benefits of Zero Trust Architecture as Defi...
by CKMo on Friday February 17, 2023 @09:50PM
(#34843367)
That's one of the ways I like to think about it. When you have zero trust, you can comfortably expose any app to the internet.
If you can't comfortably expose your app to the internet, you probably don't have zero trust.
The problem is, "exposed to the internet" is pretty much how most things are today, in a world where everything is trying to be "smart." There is a pathway to most assets and resources and that's what causes breaches. So all services and resources should be assumed as "exposed" until proven otherwise, therefore all infrastructure (and development) should apply zero trust principles.