<![CDATA[Them: How do we add zero trust to this]]>Them: How do we add zero trust to this?
Me: :stares:

Zero trust, like least-privilege, is a framework for thinking about problems. It's not a seasoning you sprinkle over your eggs.

]]>https://forum.fedi.dk/topic/c3fa95a6-6362-46dc-a8b2-b32b43b95fe5/them-how-do-we-add-zero-trust-to-thisRSS for NodeMon, 25 May 2026 20:19:52 GMTTue, 19 May 2026 14:25:17 GMT60<![CDATA[Reply to Them: How do we add zero trust to this on Wed, 20 May 2026 06:09:11 GMT]]>@sam @petrillic what I gathered from talking to a vendor at a security conference is that it's definitely not VPNs no matter the context when I told him that we had reimplemented parts of the OpenVPN protocol.

]]>https://forum.fedi.dk/post/https://social.data.coop/users/reynir/statuses/116605409814433579https://forum.fedi.dk/post/https://social.data.coop/users/reynir/statuses/116605409814433579Wed, 20 May 2026 06:09:11 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 19:43:20 GMT]]>@petrillic "Well, my trust in your organization already dropped significantly, throw in some post-quantum AI blockchain and I bet we can get to zero"

]]>https://forum.fedi.dk/post/https://mastodon.social/users/reedmideke/statuses/116602948856064202https://forum.fedi.dk/post/https://mastodon.social/users/reedmideke/statuses/116602948856064202Tue, 19 May 2026 19:43:20 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 17:34:36 GMT]]>@Emily sadly, I can't disagree. This is why I continue to try and push for new ideas and new approaches. We've tried the same thing over and over, and failed. At some point, let's try something new, and potentially still fail, but at least maybe learn something.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116602442628230340https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116602442628230340Tue, 19 May 2026 17:34:36 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 17:28:39 GMT]]>@Emily @petrillic that's the only way to have good security. It's not something that can be effectively bolted on - it needs to be part of the design from day 1.

]]>https://forum.fedi.dk/post/https://twit.social/users/brass75/statuses/116602419245638262https://forum.fedi.dk/post/https://twit.social/users/brass75/statuses/116602419245638262Tue, 19 May 2026 17:28:39 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 17:27:32 GMT]]>@petrillic

I've rarely worked at a place where they let you build in security from the start, rather than something they think they can add after everything else is done.

And almost nobody, no matter the industry, will make an asset inventory for me to use.

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/Emily/statuses/116602414887745783https://forum.fedi.dk/post/https://infosec.exchange/users/Emily/statuses/116602414887745783Tue, 19 May 2026 17:27:32 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 16:31:52 GMT]]>@petrillic there are a ton of cool cryptographic widgets coming down the pipe to be excited about, like zero-knowledge proofs, homomorphic encryption, etc. too!

]]>https://forum.fedi.dk/post/https://gts.tabby.rocks/users/sam/statuses/01KS0H8NN77FB7HC707AEWGNFMhttps://forum.fedi.dk/post/https://gts.tabby.rocks/users/sam/statuses/01KS0H8NN77FB7HC707AEWGNFMTue, 19 May 2026 16:31:52 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 16:25:47 GMT]]>@sam correct, it should have eto establish trust as well. Certificates are part of it, but it's inadequate. Unfortunately, i don't think the industry has really grappled with this.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116602172016740103https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116602172016740103Tue, 19 May 2026 16:25:47 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 15:24:36 GMT]]>@sam part of the challenge is that vendors have weaponized the terminology to describe whatever new product or feature they're peddling.

My distillation is: 1) Everything secure always; 2) Everything means everything, no implicit trust; 3) Access is granted per-session/request and strictly enforced, explicit trust; 4) Policy and decisions account for all available surveillance data.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116601931462897780https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116601931462897780Tue, 19 May 2026 15:24:36 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 14:44:02 GMT]]>@petrillic *tells everyone to stop trusting the service* there, zero trust added

]]>https://forum.fedi.dk/post/https://toot.cat/users/rnd/statuses/116601771925776045https://forum.fedi.dk/post/https://toot.cat/users/rnd/statuses/116601771925776045Tue, 19 May 2026 14:44:02 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 14:37:49 GMT]]>@petrillic

"what if you shard it?"

(as long as we're being serious about it)

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/maya_b/statuses/116601747534853997https://forum.fedi.dk/post/https://hachyderm.io/users/maya_b/statuses/116601747534853997Tue, 19 May 2026 14:37:49 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 14:37:17 GMT]]>@maya_b do you want scaled agile? Because this is how you get scaled agile.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116601745402597057https://forum.fedi.dk/post/https://hachyderm.io/users/petrillic/statuses/116601745402597057Tue, 19 May 2026 14:37:17 GMT<![CDATA[Reply to Them: How do we add zero trust to this on Tue, 19 May 2026 14:27:08 GMT]]>@petrillic

"but agile..."

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/maya_b/statuses/116601705516163489https://forum.fedi.dk/post/https://hachyderm.io/users/maya_b/statuses/116601705516163489Tue, 19 May 2026 14:27:08 GMT