> Compliance: all internal traffic must SSL too! Let's not forget that by not en...

		jjav on July 11, 2021 \| parent \| context \| favorite \| on: Cybersecurity and the curse of binary thinking > Compliance: all internal traffic must SSL too! Let's not forget that by not encrypting internal connection is how google internal traffic was stolen by the NSA (see Snowden revelations), which is why they now (reportedly, I'm not there) encrypt everything in transit.

Yea, I use AWS, subnets, Sec Groups, IAM Roles, different case