Re:NIST 800-207A: Implementing Zero Trust Architecture
by mdhb on Sunday March 03, 2024 @06:02PM
(#39585343)
I think one of the core lessons in network security in the past 10-20 years is that the VPN model is fundamentally broken from a security perspective.
There is another entirely seperate argument that I think you’re making which says zero trust is still a huge pain in the ass which I would largely agree with.
To the point that it wouldn’t even be in consideration for individuals although I will say that if you were in a situation where something like ChromeOS and a $5/m workspace account might fit your needs you could actually get yourself a pretty great setup from a security perspective and all the zero trust stuff is handled for you when it comes to anything in that ecosystem.
There is another entirely seperate argument that I think you’re making which says zero trust is still a huge pain in the ass which I would largely agree with.
To the point that it wouldn’t even be in consideration for individuals although I will say that if you were in a situation where something like ChromeOS and a $5/m workspace account might fit your needs you could actually get yourself a pretty great setup from a security perspective and all the zero trust stuff is handled for you when it comes to anything in that ecosystem.