3 ms·
>No incentive, right? If you mess up as a CA, you go out of business because every browser drops you. Not going out of business is not the only possible incent
by fauigerzigerk 3y ago
>No incentive, right? If you mess up as a CA, you go out of business because every browser drops you.
Not going out of business is not the only possible incentive though. Security is a pretty key part of the sales pitch of every cloud provider: "We can do this better than your in-house team" they keep saying.
No one is going to move 100,000 employees off Microsoft over this, but what about signing up the next 100,000? Will it impact next quarter's growth figures?
And for the people directly responsible for security at Microsoft breaches like these may be a career risk or at least a huge embarrassment. There will be meetings. People will get blamed. Some will feel they haven't met their own professional standards.
There's no lack of incentives.
- mistrial9 3y agoyou claim that contracts at this level are executed on the basis of technical merit?
- fauigerzigerk 3y agoI'm not sure I would call it technical merit, but sentiment and reputation do play a role in negotiations. No cloud provider wants to be perceived as having a weakness in terms of security compared to its closest competitors. There are debates about risks when large companies move to the cloud - in some industries more than in others. Opposing groups within companies as well as competitors' sales people will be looking for weak spots to make their case. In isolation, incidents like this don't make a difference. If it looks like a pattern that would be bad for business though.
- freedude 3y agoDoes Microsoft have a reputation for good security, adequate security or poor security? How has this affected sales over the years? I believe they won the PC wars years ago and there has never been a good replacement system with enough customer incentive that met the same price point. It is this cow they continue to milk.