Topic: configuration

• Secure defaults and fail-closed design

  Saltzer and Schroeder's fail-safe defaults principle bases access on explicit permission, so that a mistake denies rather than grants; applied today it means deny-by-default authorisation, configuration that refuses to start when a security setting is missing, and error paths that close access instead of opening it.

  article · en · unreviewed

Machine-readable: JSON