The internet of the last 30 years was based on trust and that’s how it grew.
No one owns the full supply chain, we all just “take a little bit of this here and there”, with OSS, with PaaS and SaaS, with npm/composer, SSL certificates, analytics providers, etc.
But this is actively changing. Now no one can be trusted. It’s not just about sanitizing user inputs anymore, we need to be actively aware of EVERY part of our supply chain and, to some extent, have contingencies in place.
commit 61512e2