9 ms·
Security is another one where the "fix it later" mentality leaks in, with the resulting consequences!
by jis 10y ago
Security is another one where the "fix it later" mentality leaks in, with the resulting consequences!
- halostatue 10y agoIt’s all about the acceptable trade-offs. There are certain things that I am not willing to compromise on security; there are other things where I’m not as concerned. We currently don’t use HTTPS inside our firewall; once you’ve passed our SSL termination, we don’t use SSL again until outbound requests happen that require SSL. Should we? Well, it depends. There are things that I’m concerned about which would recommend it to us, but it’s not part of our current threat model because there are more important problems to solve (within security as well as without).
- jis 10y agoI don't disagree. There are always engineering trade-offs. What I have issue with is sites that do not bother to even think about security. They operate under the false sense of security that no one will bother them.