Hacker News Reader

Good reason why defense in depth should be used.

Simply stating that your network configuration prevents access isn't the best answer.

>Simply stating that your network configuration prevents access isn't the best answer.

Right. The network should actually be configured to prevent access.

And, in the event that this configuration fails to do what you expect it to you, or your network is breached via other means, you should be utilizing defense and depth and all of your DBs and other sensitive systems should require authentication.

This.

This is why google assumes that the network layer adds no security.

https://cloud.google.com/beyondcorp/

Reply on news.ycombinator.com