3 ms·
The whole security mindset everywhere has shifted towards not trusting the network. Everything encrypted in between your laptop and the end server.
by Gigachad 2y ago
The whole security mindset everywhere has shifted towards not trusting the network. Everything encrypted in between your laptop and the end server.
- dylan604 2y agoAnyone that ever had a policy of trusted devices on the network was just living in a fantasy land. The only reason the network ever had trusted devices was when it was in its infancy and there was nobody using it so the only devices on the net were the devices the admins put there. As soon as the first device that was not controlled by the admins was allowed to connect, the network should have been immediately untrusted. I've now taken my hindsight glasses off and recognize that it's hard to imagine that assholes and criminals would so easily ruin it for the rest of us. 50+ years later and ~30 years later of the interwebs and now it's an "but of course they would". The sad thing is that there should no longer be a blank sheet of paper for a startup, but every "new" sheet should already have defensive strategies on it. It's just not sexy, and hard to get to MVP so it's easy to drop/ignore/delay. I'm guilty too, but maybe I'm worse because I'm well aware that I'm doing it????
- avidiax 2y agoIPSec has been used for some time to provide a secure network where only trusted devices can communicate to each other or the infrastructure. You can still argue about the endpoint security, but at least the network participants and their messages can be secured, even if an endpoint is compromised.