4 ms·
Sure, but I think you can make the same comment about the motivation behind and effectiveness of almost any security measure in the enterprise space. WAFs aren
by marcus0x62 3y ago
Sure, but I think you can make the same comment about the motivation behind and effectiveness of almost any security measure in the enterprise space. WAFs aren’t particularly bad or particularly ineffective… They just aren’t good.
- mindcrime 3y agoSure, but I think you can make the same comment about the motivation behind and effectiveness of almost any security measure in the enterprise space. Hence the notion of layering and "defense in depth". But as old as this idea is, it seems like some people are still looking for / expecting silver bullets that magically "fix security". Also consider threat modeling... what security measure one needs to take are driven at least in part by factors like "how valuable is what you're protecting?" and "what are the expected capabilities of the enemy who would be attacking you?" and so on.