Mutual TLS is a security protocol where both the client and server in a network connection authenticate each other using digital certificates. It enhances the security of standard TLS (which typically only authenticates the server) by requiring the client to also prove its identity, ensuring a more secure and trusted connection. Here’s a more detailed Read More …
Tag: zero trust
Quick Note :: Attribute Based Access
We then end up with two main classifications of access control: Role-Based Access Control (RBAC). Define the role for the access to data, eg Policy = Subject (AND/OR) Role –> Permissions. Attribute-Based Access Control (ABCL). Define attributes eg Policy = User (role, nationality) AND/OR Resource (department, owner) AND/OR Action AND/OR Context (time, IP, location) -> Read More …