Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

While true on a theoretical level this is largely impractical. To quote House

>Cuddy: "How is it that you always assume you're right?

>House: "I don't, I just find it hard to operate on the opposite assumption."

If you're on a personal desktop at home you've got to place some level of trust in it.

Same with local LAN.

Once you get to more sophisticated server microservices then you can start thinking of the various components as mutually untrusted (until proven otherwise)



> Same with local LAN.

Why? I agree that you have to trust something in order to function, but I would think you could distrust the LAN pretty easily at least for certain levels of internal service. That is, it might be a struggle to distrust the LAN if you need, say, NFS or HTTP without internal domain name (to get certs), or maybe some games? But if all you need is internet access you could fully block internal connections, if you need some access you can probably rely purely on SSH, and failing all else you could run wireguard or such and force everything over that.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: