5 ms·
I think this is the definition everyone uses. I know the phrase from Google's BeyondCorp, which seems to be the first implementation of a zero trust network. [0
by watermelon0 6y ago
I think this is the definition everyone uses. I know the phrase from Google's BeyondCorp, which seems to be the first implementation of a zero trust network. [0]
However, some providers, such as SpiderOak, claim they are zero trust compliant, which in that case means that they cannot access your data, even if they were persuaded. In that sense, data is encrypted/decrypted solely on your own hardware.
[0] https://en.wikipedia.org/wiki/Zero_trust_networks https://en.wikipedia.org/wiki/Zero_trust_networks
- deleted 6y ago[deleted]
- neolog 6y agoWarrant canary issues https://www.schneier.com/blog/archives/2018/08/spideroaks_warr.html https://www.schneier.com/blog/archives/2018/08/spideroaks_wa...
- closeparen 6y agoTo be pedantic, the central example of a zero trust network is the internet. BeyondCorp popularized the idea of running corporate services the same way as internet facing services, instead of relying on the internal network as a security boundary.