I like the way metadat put it: "a Raw Sewage network". Zero trust is the idea that all networks are hostile and you shouldn't trust any of them. Worst case sce

I like the way metadat put it: "a Raw Sewage network". Zero trust is the idea that all networks are hostile and you shouldn't trust any of them. Worst case scenario, when you attach to an unknown network (public WiFi) without knowing what other devices are on that network, they might be hostile and attempt to attack/compromise the machine that just joined the network. Sometimes it's not active. Other compromised machines might do the same even on a trusted network like the corporate LAN or just your friend's house WiFi. So zero trust encourages you to trust no network, open no hole in your firewall, allow no inbound connections. Any connections that are established need to be verified first before allowing the connection.