3 ms·

This is generally pretty awful. The first point about default allow is moot today since nearly all protocols encapsulate all others. HTTP for instance can do a

• corv 12y ago
  Port and protocol are not necessarily the only way to implement whitelisting. A solution like Little Snitch is a step in the right direction concerning networking in my opinion. Which application is opening the connection is just as important as the destination. An enterprise version of such a program could allow network admins to set rules for different users and help spot unfamiliar applications that are acting suspiciously. Firewalls aren't dead, they will just become better at inspecting traffic and classifying applications. A higher degree of security is achievable, the only question is if customers are actually going to demand well engineered products. Until then companies are going to cut corners in order to out-compete each other.