Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

But with public key auth I'm already distrusting everyone on my private network.


Technically I guess that's "zero trust" in the sense of meeting the requirement of not trusting internal connections more than external ones, but in practice I guess "zero trust" also typically entails making every connection go through the same user-based authentication system, which uploading specific keys to specific servers manually definitely doesn't achieve.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: