<story><title>&apos;Zero trust’ security is a poor choice of words</title><url>https://code.mendhak.com/zero-trust-poor-choice-of-words/</url></story><parent_chain><item><author>theptip</author><text>I suppose the thesis that it’s a bad name is borne out by the fact that many technical people misunderstand it; it’s a contraction of “zero trust networking” and is a fine description of the technical approach: don’t trust anyone by virtue of their network location. (Trust is negotiated at the application layer.)&lt;p&gt;#NoVPN or Zero Perimeter could be better slogans.&lt;p&gt;On the other hand, the only people I have seen confused are technical people that (incorrectly) think they have identified an inconsistency; non-technical folks seem fine to just map name-&amp;gt;feature-set.</text></item></parent_chain><comment><author>herghost</author><text>Agreed - I&amp;#x27;ve seen the same result in my current company. The only real objection raised is from a technical pedant who argues that we&amp;#x27;re trusting identity and so we shouldn&amp;#x27;t call in _Zero_ Trust. He&amp;#x27;s almost deliberately missing the point though.&lt;p&gt;Our users, on the other hand, are not making any real noise about it because from their point of view it&amp;#x27;s the natural extension of SSO (from the point of view of that being the only bit that they will interact with in any meaningful way) and that was something that reduced friction for them too.&lt;p&gt;We&amp;#x27;ve not suffered from the name really, to be honest.</text></comment>
<story><title>&apos;Zero trust’ security is a poor choice of words</title><url>https://code.mendhak.com/zero-trust-poor-choice-of-words/</url></story><parent_chain><item><author>theptip</author><text>I suppose the thesis that it’s a bad name is borne out by the fact that many technical people misunderstand it; it’s a contraction of “zero trust networking” and is a fine description of the technical approach: don’t trust anyone by virtue of their network location. (Trust is negotiated at the application layer.)&lt;p&gt;#NoVPN or Zero Perimeter could be better slogans.&lt;p&gt;On the other hand, the only people I have seen confused are technical people that (incorrectly) think they have identified an inconsistency; non-technical folks seem fine to just map name-&amp;gt;feature-set.</text></item></parent_chain><comment><author>otterley</author><text>+1 for NoVPN. It&amp;#x27;s short, sweet, and quickly conveys the benefit. It may also remind people of the frustrations they often face using VPN software, which is often flaky and has a poor UI, so eliminating it could be met with feelings of relief.&lt;p&gt;Nevertheless, it&amp;#x27;s always a little unsettling whenever some Internet rando confidently posits that a phrase conveys a certain meaning or emotional reaction to people &lt;i&gt;without any evidence whatsoever.&lt;/i&gt;  I mean, come on, do a little market research. Do your homework. (The same goes for me!)</text></comment>