7 ms·
The actual roadmap document (PDF) is not linked directly from the press release: https://dodcio.defense.gov/Portals/0/Documents/Library/DoD-ZTExecutionRoadmap.
by degenerate 4y ago
The actual roadmap document (PDF) is not linked directly from the press release:
https://dodcio.defense.gov/Portals/0/Documents/Library/DoD-ZTExecutionRoadmap.pdf https://dodcio.defense.gov/Portals/0/Documents/Library/DoD-Z...
- oyashirochama 4y agoZero trust is fun, it's fine if the computers were all from the last decade and not circa. 2011-2013 HP mini's with HDD rather than SSDs or M.2 in the newest revisions of allowed devices on our networks.
- eikenberry 4y agoWhy would the hardware matter? Zero trust has zero (ha!) to do with hardware.
- jabl 4y agoDon't zero trust architectures often require secure boot as well as a functioning TPM-like secure enclave to do attestation on the client device before allowing the user to logon to some resource?
- PLG88 4y agoI would say thats a bonus. Zero trust should be based on strong identity (e.g., x509) and authentication/authorisation-before-connect, ideally that identity would come from HWRoT/TPM. Unfortunately, many vendors say they are zero trust while only implementing some aspects/principles. I wrote a blog on this topic earlier in the year - https://netfoundry.io/demystifying-the-magic-of-zero-trust-with-my-daughter-and-opensource/ https://netfoundry.io/demystifying-the-magic-of-zero-trust-w...
- daveevad 4y agoIt seems to me that distributing this information as a PDF undercuts the message a bit. It's tangential; sure, but also, it doesn't strike me as particularly good security either.
- eat_veggies 4y agowhat do you expect it to be distributed as?
- brookst 4y agoAdobe Flash wrapped in an executable player, of course.
- FpUser 4y agoThanks for making evening less boring ;) I also have my somewhat related strategy, it is called Zero Rust.
- daveevad 4y agoI was thinking text/plain would be best way to get the point across.
- nvr219 4y agoThe type of people that DoD wants to read this are not the type of people that prefer text/plain.
- daveevad 4y agoThose are the people that need to understand that a lot of security depends on simpler file formats.
- imwillofficial 4y agoExcept that’s completely false.