+1 to not trusting your network (or any network), but that doesn't mean you should give up on securing your clients if you have control over them (e.g. in a cor

+1 to not trusting your network (or any network), but that doesn't mean you should give up on securing your clients if you have control over them (e.g. in a corporate environment). FWIW Google certainly does not ignore client security. They do assume that all networks are untrusted. "Google’s BeyondCorp initiative is moving to a new model that dispenses with a privileged corporate network. Instead, access depends solely on device and user credentials, regardless of a user’s network location—be it an enterprise location, a home network, or a hotel or coffee shop." "BeyondCorp uses the concept of a “managed device,” which is a device that is procured and actively managed by the enterprise. Only managed devices can access corporate applications." http://static.googleusercontent.com/media/research.google.com/en//pubs/archive/43231.pdf http://static.googleusercontent.com/media/research.google.co...