 |
Post AwB6qoEXYXyncfHo6y by [email protected] |
 |
More posts by [email protected] |
|
Post #AwA8YB8y9rzTvQxriS by [email protected] |
|
0 likes, 0 repeats |
|
|
|
Google's utter failure to turn Beyondcorp into a product has led to some ab… |
|
|
|
Post #AwA8YBGPiBwgIWRoJs by [email protected] |
|
0 likes, 0 repeats |
|
|
|
Just reading vendor docs with "But... no... why?" vibes because appar… |
|
|
|
Post #AwA8YBMnKT38cJQuGW by [email protected] |
|
0 likes, 0 repeats |
|
|
|
Absolutely minimal viable Beyondcorp: nginx with mutual TLS auth configured, so… |
|
|
|
Post #AwA8YBTWvQRAxCaHlQ by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 wait seriously? I thought mutual TLS was the most basic, typical method.… |
|
|
|
Post #AwA8YBayTkONKI4EMq by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@astraleureka @mjg59 what is disastrous about Kerberos? |
|
|
|
Post #AwB6qo8Vux9vJySzia by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 the last couple years i did a whole talk circuit about how you could … |
|
|
|
Post #AwB6qoEXYXyncfHo6y by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@Viss @mjg59 Nowadays the Exchange servers (by way of the Outlook "clients… |
|
|
|
Post #AwCSMrv1gMiiVxFNDc by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@mjg59 Bring Apple’s Managed Device Attestation and Network Relay into the mi… |
|
|
|
Post #AwWZjuIfa0vfOvRAUS by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 And now they likely never will, after losing a bunch of institutional kn… |
|
|
|
Post #Awcj3Otw5woMLXzvjk by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 why not Tailscale? |
|
|
|
Post #Awcj3P11faTyhXJamu by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@djc The goal is to be transparent, which Tailscale isn't |
|
|
|
Post #Awcj3P7PHraR1KIgjY by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 what exactly do you mean by transparent in this context? Client certific… |
|
|
|
Post #Awcj3PD4wm7jIuxDZg by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@djc I open my browser and I visit a site. I don't need to start any form o… |
|
|
|
Post #Awcj3PJ6aMwbbbm1y4 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 @djc i guess? but Tailscale is always on and from the perspective of the… |
|
|
|
Post #Awcj3POmFHTttCQYoC by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@leftpaddotpy @djc If you want to use the same solution to handle random other … |
|
|
|
Post #Awcj3PVrov9WFBkDrM by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@leftpaddotpy @djc And it works! It clearly works! *.corp.google.com resolves i… |
|
|
|
Post #Awcj3PcxOYp8bB3suW by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@mjg59 @leftpaddotpy @djc that's also a very self fulfilling prophecy give… |
