A RECIPE FOR SCALING SECURITY

Summary from the TLDR InfoSec newsletter

A post from the Google Security team on creating large-scale security changes. It begins by detailing some scalability issues in the team’s attempt to roll out Strict CSPs. The post then delves into the tooling and metrics that were required to collect data and implement changes that scale better to the immense number of services that Google operates.