2 ms·
The infosec definition of trust is not really the same as the colloquial meaning of trust. The infosec "trust" is not something earned or even verified, but an
by pornel 7y ago
The infosec definition of trust is not really the same as the colloquial meaning of trust.
The infosec "trust" is not something earned or even verified, but an assumption that something is not malicious. Imagine a fortress: inside of the walls is called "trusted", outside of the walls is "untrusted". So a trusted CA merely means a certificate inside your fortress' walls that an attacker can't modify.
- buckminster 7y ago> an assumption that something is not malicious. It's not even that. It's just a statement of fact. The things that you put in positions where they can fuck you are de facto the things you trust. You might know for a fact that they are untrustworthy garbage, but you're still trusting them.