Transport layer security (TLS) is the de facto standard for sending and receiving secure HTTP traffic. With this in mind, Varnish long ago built a standalone TLS proxy on the open-source Hitch project. It delivers secure transport and doesn’t interfere with content delivery performance, but for a number of reasons, it’s not always the right choice for every implementation.
Cybersecurity requires more than just a single action or approach because threats exist on many levels. Some of the biggest threats, in fact, can be internal: employees who aren’t fully aware of cybersecurity threats like phishing are a risk; incorrect configurations within your infrastructure can bring your website down (in fact, configuration errors can bring down half the internet). Cybersecurity isn’t just about securing web traffic through transport layer security (TLS) or putting up a firewall, even though these are necessary fundamentals.
Authentication and authorization policies exist in companies of all types and sizes to govern access control and determine who can see and work with specific data. At the same time, people are one of the biggest security vulnerabilities in organizations, making access control at a granular level one of the most important means of securing your sites, apps and your business as a whole, particularly at a time when ransomware and other attacks are on the rise.
The statistics around data breaches and personal information misuse are alarming. In the United States alone, there is a new victim of identity theft every two seconds. As of June 2020, at least 16 billion records (including personally identifying information, credit card numbers, and sensitive information) were breached or leaked. The United States Federal Trade Commission (FTC) received more than 1.4 million complaints about identity theft in 2020 (up from 651,000 in 2019). More than 33 percent of Americans, according to a Proofpoint survey, claim to have experienced identity theft. IBM statistics indicate that the average cost of a data breach is almost four million USD.