DEV Community

Discussion on: Is web security broken?

Collapse
 
sebbdk profile image
Sebastian Vargr

Security is about circles of trust.

Larger circles are usually more complex, hence why web security have so many things to consider.

If you have a static site, you trust no one, and need to trust no one, your circle is small.

If you have forms on that site you need https, now you need to trust the network the data is passed through, so you need encryption, https, your circle grows.

If those forms share their data with people you do not know, then you need to bring them into your circle, so you might need a login, and some cookies to manage access.

And so on.