4 ms·
People who call ZTN a meme are usually just ignorant. It's a very simple and effective solution. Mutual authentication, explicit authorization, attestation, and
by staticassertion 4y ago
People who call ZTN a meme are usually just ignorant. It's a very simple and effective solution. Mutual authentication, explicit authorization, attestation, and auditing. Not exactly buzz word soup.
- Shank 4y agoI was recently on a call with someone who said their company was "totally zero-trust" because they disabled copy & paste on all workstations. I definitely believe in the concept, but it's definitely turning into a parroted term that's applied to anything.
- jjav 4y ago> People who call ZTN a meme are usually just ignorant. It's become a "meme" because it is used in endless irrelevant ways. So many companies are pushing zero-trust solutions that don't have anything to do with the basic idea of requiring access control at every endpoint. Also, while it is a very sound practice, there's also the hyped idea that it replaces everything else. Which is not very wise. You still want defense in depth over and above requiring acess control everywhere.
- raesene9 4y agoIt shouldn't be buzzword soup, that does not mean that companies and vendors don't use it that way. Pretty much any time a new security concept comes up vendors race to say that they implement it, whether they do or not. With Zero trust, it's hardly a new idea (e.g the Jericho forum de-perimeterization) but it's hard to implement well across all systems.
- staticassertion 4y agoIf you're stupid enough to fall for vendor buzzword garbage that's kind of on you though, right? It says nothing about ZTN.
- raesene9 4y agoBy that definition of stupid, pretty much every large company in the world is stupid in someway or another :)