Post #3355656
2026-06-19 18:41 UTC
thats, like, your opinion man. frankly slapping a VPN on top of everything else doesnt improve your security posture unless you have the skills to manage that system on top of everything, including ongoing validation that its configuration is restricting what you want it to.
a robust authn/authz at the application layer is what secures your environment. VPNs are just slapping a wall around your network that is trivially penetrated by browser (and their extensions) these days.
stop spouting dogma seriously doesnt make you look intelligent.
Replies (2)
-
@frongt@lemmy.zip 2026-06-19 19:03
The VPN isn’t “on top of” anything, it’s instead of everything.
-
@dan@upvote.au 2026-06-19 20:14
If a service is publicly accessible, anyone can access it. There can be security issues in the auth layer of the app, improperly secured endpoints, etc. If a service is only available over VPN, nobody can access it unless they’re on the VPN. The service isn’t visible over the public internet. You can require two factor auth to connect to the VPN. There’s a reason why practically every company requires people working remotely to connect to a VPN to access company resources.