This is a really odd description of zero trust. For end users, zero trust looks ...

indymike · on July 16, 2022

I love how the industry takes a word like "devops" and redefines it until meaningless. I think that has happened to Zero Trust as well.

jameshart · on July 16, 2022

But.. your description doesn’t match up with what I think the original definition of zero trust means?

You said it was about preventing unknown services turning up on a network, which almost feels like the opposite of zero trust to me.

Zero trust is about not caring if unknown services are on your network, because merely ‘being on the network’ doesn’t grant you access or trust.

onionisafruit · on July 16, 2022

To put it more succinctly, in the zero-trust mindset it isn't ever _your_ network.

It's a network you happen to be connected to. Your only trust the network at the physical layer that it won't destroy your hardware. Beyond that you don't trust anything you receive over the network that you can't independently verify.