4 ms·
Disagree. This just reinforces the point that best security is multi-layered.
by aventrix 7y ago
Disagree. This just reinforces the point that best security is multi-layered.
- tptacek 7y agoThat's an apology every crappy security add-on has always made. We shouldn't be happy about applying layer after layer of faulty controls, let alone applauding that as some kind of defense-in-depth best practice.
- nullwasamistake 7y agoWAF are basically all HTTP proxies. If you app has a non-broken HTTP implementation they're useless.
- sytringy05 7y agoyup, WAFs, IDS and IPS prevent protocol abuse. Everything else is the development teams problem