3 ms·

I'd view it as more tautological than that. "If you don't understand security then you don't understand security" isn't really controversial.

• at_a_remove 6y ago
  "If you have not yet attained Buddhahood, you cannot understand the value of enlightenment." is also a non-controversial tautology, but it also doesn't leave any room for anyone to do anything else.
  • kerkeslager 6y ago
    If you're being paid to secure a system, there isn't room for you to not secure the system.
    • at_a_remove 6y ago
      The most secure system, naturally, being one that is turned off with its network connection desoldered. At last, nirvana!
      • kerkeslager 6y ago
        So clever! But, obviously we're talking about making a good-faith effort to secure servers while allowing them to provide their intended functions. Refusing to implement HTTPS because you don't know how to use Certbot isn't that.
        • at_a_remove 6y ago
          As stated, Certbot wouldn't work in the case I mentioned.
          • kerkeslager 6y ago
            Based on your description, it would work just fine, you're just prevented by contract from using it.