[riffic]

assume everything in the internal network is compromised already. the moat and castle model is dead.

https://thenewstack.io/why-the-castle-and-moat-approach-to-s...

[system33-]

A VPN can be required to access internal network(s) without implying a lack of further roadblocks/restrictions/authorization checks/etc.

[riffic]

is the real world that disciplined?

[liveoneggs]

sales blogs for security?