4 ms·
A lot of companies that care deeply about security are moving to this “trust no one” approach which has the added benefit for end users of allowing access to “s
by code4tee 6y ago
A lot of companies that care deeply about security are moving to this “trust no one” approach which has the added benefit for end users of allowing access to “secure internal sites” over the plain old internet. If done right this can all be a big boost for security and improved end user experience. That said, the old “you need to be on the VPN” approach is going to stick around for some time.
- sokoloff 6y agoWe’re about 1/2 way down this road and it’s hard to overstate how true this is with respect to the benefits for end-user experience. We did it for the security, but if I’d have known the convenience benefits, I think we’d have started earlier.
- ndomer 6y agoFor sure, VPNs will always be used. I think it'll take a BeyondCorp SaaS company to really take off (or have it become a more "Managed"auth method from the big cloud providers). At Transcend we are able to do it because we had an early focus on protecting our internal apps, but obviously it's a lot harder to migrate hundreds of services than to start out with a newer approach. I loved not having to use a VPN back when I worked at Google though, and am glad to see that the open source world is starting to offer some tools to play around with.
- deleted 6y ago[deleted]
- mc32 6y agoI mean, yes, if you have billions to dedicate to building a leading class security team-not all organizations have that money and not all organizations need to take that approach. Some do and some need to.