4 ms·
That is not the idea currently being pushed. The zero trust idea is 'just because they are on the right subnet doesn't mean you can trust them'. So you add thi
by rocqua 4y ago
That is not the idea currently being pushed.
The zero trust idea is 'just because they are on the right subnet doesn't mean you can trust them'. So you add things like healthyness checks (is this device up to date), anomaly detection, and use those to dynamically determine how much authentication challenge you give a user.
For this to work, the key is really good and easy single sign on with second factor also made easy. That way you can do more trusted authentication (a SSO token backed by Microsoft login is harder to phish than just a password. More importantly, it really lowers the authentication burden on your users.
- hamandcheese 4y agoData point: Parents definition of zero-trust largely matched mine and doesn’t seem particularly incompatible with yours.
- rocqua 4y agoZeeo trust, as I understand it, is all about authenticating user devices, rather than fixed appliances. It is much less something that happens between appliances (though appliances authenticating themselves to clients does count). I think that is incompatible with what parent said.