2 ms·

I thought zero trust is the only reasonable approach.

• tptacek 7y ago
  This is a thing that people say because it's ideally true and an article of faith among cool-kid practitioners†, but it is absolutely not the reality in major enterprises, and wanting it to be the case doesn't make it so. † I agree with the cool kids that it's a good thing!
  • saber6 7y ago
    > This is a thing that people say because it's ideally true and an article of faith among cool-kid practitioners†, but it is absolutely not the reality in major enterprises, and wanting it to be the case doesn't make it so. As someone who deals with large enterprises with regards to network architecture, you couldn't be more wrong if you tried. If you aren't adopting a zero-trust like security model, you are retarded, to use less-than professional speak.
• PeterisP 7y ago
  It's a reasonable approach if you're ready for this, but there are many organizations which would need lots and lots of work on infrastructure to be prepared to anything close to zero trust, and "simply" switching to a zero trust model would be a disaster.