4 ms·
> Never mind that a KISS setup tends to bring security because of its minimized attack surface Security is also about depth. You should assume breaches can hap
by akvadrako 6y ago
> Never mind that a KISS setup tends to bring security because of its minimized attack surface
Security is also about depth. You should assume breaches can happen and have another level of defense.
That only increases the attack surface but it's a much better approach for imperfect beings.
- lmm 6y agoIn my experience that approach actually ends up leading to weaker security. When you have 5 or 6 security layers it's not clear which ones are important; people get confused about which parts can be safely bypassed and how, and you end up with a swiss cheese where sooner or later all of the holes line up. Having a really clear distinction between public and private services works better.
- Too 6y agoIn a way yes. I'm sure everyone here has heard "This service can only be accessed on VPN anyway so we don't need authenticated access or care about security in the service itself".