Conversation

Notices

1. Embed this notice
   Matt Sicker (sickmatter@infosec.exchange)'s status on Wednesday, 12-Apr-2023 18:46:02 JST Matt Sicker

   • coleen

   @coleens_ personally, I prefer wide open networks that support the internet as designed. Blocking ICMP? That’s a paddling. Blocking experimental IP traffic? Into the Iron Maiden with you!

   Why would I make things harder on myself? It’s called zero trust: I’m not going to trust that my firewalls work, so let’s use end to end mutual authenticated encryption for all the things!

   • Embed this notice
     Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)'s status on Wednesday, 12-Apr-2023 18:46:01 JST Jake Hildreth (acorn) :blacker_heart_outline:

     in reply to

     • coleen

     @sickmatter @coleens_ Do you apply that line of thinking to inbound traffic too? No judgement, just curious!

   • Embed this notice
     Matt Sicker (sickmatter@infosec.exchange)'s status on Wednesday, 12-Apr-2023 23:50:53 JST Matt Sicker

     in reply to

     • coleen
     • Jake Hildreth (acorn) :blacker_heart_outline:

     @horse @coleens_ in a zero trust environment, we can drop most or all unencrypted traffic ?