3 ms·
IMHO there's a huge gap between "trust this dell hardware not to contain hardware implants" vs "trust cloudflare warp to MITM every SSL connection I make"
by michaelt 4y ago
IMHO there's a huge gap between "trust this dell hardware not to contain hardware implants" vs "trust cloudflare warp to MITM every SSL connection I make"
- mjg59 4y agoThe conflation between "Zero Trust" and "Zero Trust implemented with third-party infrastructure" is unfortunate - I think it's reasonable to feel uncomfortable with a third party being in a hyper-privileged position to effectively assert access to your infrastructure, but that's not inherent to Zero Trust and we shouldn't frame the conversation in such a way that assumes that it is.
- remram 4y agoHow so? Do you mean because a hardware mod would be physically detectable, maybe?
- attentive 4y agoHa, MITM SSL... My pet peeve is crowdstrike having root/admin RCE backdoor on every server/client OS. Talk about trust.
- deleted 4y ago[deleted]
- acdha 4y agoThat’s orthogonal to zero trust, however, and either way it’s still relative: if you have a policy requiring traffic inspection it’s not unreasonable to think that Cloudflare is going to be safer than some random box in the basement run by the average enterprise network team.