News for hackers. Stuff that matters.

A comment on Unpacking the Benefits of Zero Trust Architecture as Defined by NIST. Parent comment

Re:Unpacking the Benefits of Zero Trust Architecture as Defi... by pclmulqdq on Friday February 17, 2023 @10:24PM (#34843558)
Wait, but I thought everyone was doing that anyway prior to the "zero trust" thing. The difference was who you trusted to hold user (and concern-specific) keys - before zero trust, it was your server, and afterward, it's the user.

Authentication and authorization for internal services is kind of basic.

[ Parent | on HN ]
Re:Unpacking the Benefits of Zero Trust Architecture as Defi... by PeterisP on Saturday February 18, 2023 @06:44AM (#34846129)
> I thought everyone was doing that anyway prior to the "zero trust" thing.

Nope, lots and lots of organizations who have a zillion of internal services which they know to be insecure but are kept that way because they "are accessible only on the protected network".

[ Parent | on HN ]