Since writing my last article for IDPro on zero trust, the NSA went and put out their own guidance on zero trust (Which is actually pretty solid). I wrote a bunch on trying to compare the two- they’re a lot more alike than I anticipated, and I suppose that’s a good thing. It really feels like the US government has (Collectively) come out swinging on this topic, and I don’t think this is a bad thing at all....
I wrote an article forever ago for 2600 on passwords, and they ended up publishing it finally. Once we get into like October or November (Whenever the last 2600 of the year comes out, I guess) I’ll post the article here as a PDF, shamelessly scanned from my copy, as 2600 has indicated the article is mine to do with as I wish, and I figure giving them the better part of a year before I make it more widely available is a nice thing to do....
The folks at IDPro were kind enough to let me write an article for their newsletter. I won’t spoil what the article is about, but I will link it here. Have fun.