4 ms·
This was a good read for the fundamentals, it's nicely opinionated and would get a lab of unix workstations running even today (if allowed substitutes like cvs-
by elevation 3y ago
This was a good read for the fundamentals, it's nicely opinionated and would get a lab of unix workstations running even today (if allowed substitutes like cvs->git.)
But what do you do if you have ~0 unix workstations? Mobile clients, BYOD, offsite IaaS/PaaS, PKI certs for an https-only world, 3rd party APIs, file share between windows/mac clients all make things more complex. Do you want your infra to retrieve packages over port 80 until you can setup the CA to get trusted 443? Do you want to keep API keys in git until you can setup the vault-server? Are there any services you should NEVER authenticate through Okta?
Would be neat to see a modern bootstrap walkthrough from "founders use gmail and a Wix.com site" to a zero-trust(ish) set of company-hosted services that 100 remote/on-prem employees can access with a single credential set from devices including company workstations and personal laptops.