5 ms·
> You should be providing access to software, not networks. You should be providing access to an identity, not software. If someone is running the same softwar
by cassianoleal 4y ago
> You should be providing access to software, not networks.
You should be providing access to an identity, not software. If someone is running the same software but with the wrong identity, it should be denied access.
One non-malicious example that comes to mind is the right application from the wrong environment, e.g. dev frontend calling prod backend, or even worse prod backend calling test DB, etc.
- judge2020 4y agoI think they meant that software is 'what the identity should gain access to', and you 'should not grant that identity access to networks'; it is worded a bit confusingly.
- lokar 4y agoFrom a known identity to an API
- politician 4y agoClose! Identity and environment. Even if you have "launch the missiles" authority, you might not have it on the weekends, at night, or from Cuba.
- nightpool 4y agoI feel like you need to go back and read the comment I'm responding to again, because you have deeply misinterpreted what I'm saying. I'm talking about the things users access, not who they are when they access them.