5 ms·
There's something called defense in depth. Even with ES deployed in an environment with proper network firewall rules...etc, I'd still want some sort of authen
by cobookman 7y ago
There's something called defense in depth.
Even with ES deployed in an environment with proper network firewall rules...etc, I'd still want some sort of authentication/RBAC
- jwandborg 7y ago"Defense in depth" sounds, to me, like a phrase to justify multiple layers of imperfect security. A single layer of cloth might not hold water, adding more layers of cloth may hold water for longer, but it's probably more cost effective to start with the right material.
- deleted 7y ago[deleted]
- peteretep 7y ago> "Defense in depth" sounds, to me, like a phrase to justify multiple layers of imperfect security. That’s absolutely correct! But you seem to be missing the fact that _all_ layers of security are always imperfect.