4 ms·
Good thoughts. Trust is such a complex subject. For example, I see a fault in current cybersecurity thinking caused by misunderstanding "zero trust". In the r
by nonrandomstring 4y ago
Good thoughts.
Trust is such a complex subject.
For example, I see a fault in current cybersecurity thinking caused by
misunderstanding "zero trust". In the right place zero-trust is
precisely what we need, and the US government has recently made a huge
policy leap in defaulting systems to zero-trust.
But oddly (not paradoxically) the place to deploy zero-trust is
internally. And the place to design systems which leverage
trustability is on external facing ones.
People who don't get it throw up their hands and say "that's crazy,
it's the people outside we cannot trust". Surely our internal systems
are trustworthy, so no need. On the contrary, it's precisely because
internal trust already exists that security and low friction benefits
accrue from going full zero-trust. For public facing systems the
benefit comes from a more trusting stance, backed by high system
security and resilience.
It's pretty much the opposite from what we've been doing.