Though beautiful mathematics and verified algorithms still aren't enough to make a usable system.🔐
We use internet-connected devices to access our bank accounts, keep our transport systems moving, communicate with our colleagues, listen to music, undertake commercially sensitive tasks – and order pizza. Digital security is integral to our lives, every day.
Unfortunately, absolute trust is then placed in the verification system being used. So breaching this system gives an attacker the keys to the kingdom. To address this issue, “decentralization” is a new paradigm that removes any single point of vulnerability. However, in a zero-trust environment, absolute faith is placed in the validation and verification system, which in most cases is an Identity and Access Management system. This creates a single trusted entity, which, if breached, gives unencumbered access to the entire organization's systems.An attacker can use one user’s stolen credentials to impersonate that user and do anything they’re authorized to do – whether it’s opening doors, authorizing certain payments, or copying sensitive data.
If passwords could be verified without having to be stored like this, attackers would no longer have a clear target. This is where decentralization comes in.