Security posture that can reasonably withstand nation states

Encounter5729: > This seems a pain in the ass. That’s my main critique, the system seems so hardened that at some point this person will just bypass it. It is enforced on the VPN gateway, which is itself managed from a PAW. Hence, it can not be bypassed, especially given any such bypass would itself become a vulnerability. Encounter5729: > If you are a serious (publicly know target) of a nation state target, you need to take step to ensure physical security. This is probably underappreciated advise, it will be considered more strongly. Thank you. Encounter5729: > I don’t think we should advise people on specific situation. There are people who already do that for a living (you?) but generally speaking a few remarks. Primary looking for feedback to improve from here and possible weak points that were missed. Any advise is welcome and will be evaluated thoroughly. As a side note: given the browser is the major remaining attack surface in this setup, currently exploring remote browser isolation. Unable to find any open source solutions remotely comparable to what Cloudflare offers, but this would close the last remaining (easy) vector. If anyone has pointers on this, would be awesome.