3 ms·

Why security teams are losing trust in the term ‘zero trust’

• incomingpain 4y ago
  Terminology being misused is 1 thing. A term evolving to be worthless as a term is another thing. The actual concept of zero trust is another. Everyone agrees zero trust is the way to go. If non-technical people ruin the terminology, that's not going to change the usefulness of zero trust.
  • PLG88 4y ago
    You have both non-technical people ruining it as well as purists that say zero trust is a paradox in itself. They are both wrong in my opinion. I just gave a response on the latter in the CSA (message 57... long thread) - https://circle.cloudsecurityalliance.org/discussion/zero-trust-paradox https://circle.cloudsecurityalliance.org/discussion/zero-tru...
• 31337Logic 4y ago
  Zero Trust... except for the IDP, and the root CA, and my supply chain, and the SSO token, and my PAM credential storage tool, and the Ops team that I've delegated "Password Reset" rights to, and the JIT approvals for my Azure AD GA requests... but other than that, Zero Trust. :-/
  • PLG88 4y ago
    Funny, this covers a lot from my post below (https://news.ycombinator.com/reply?id=33234667&goto=item%3Fid%3D33233317%2333234667 https://news.ycombinator.com/reply?id=33234667&goto=item%3Fi...)... you cannot have zero trust, its really about less trust of the network (at least in the case of ZTNA). I wish we could go back in time and change the term.