4 ms·
This is precisely why you store your signing keys in a HSM attached to your build server, precisely so that it's impossible to leak them (either by malice or in
by tjohns 11y ago
This is precisely why you store your signing keys in a HSM attached to your build server, precisely so that it's impossible to leak them (either by malice or incompetence).
- johansch 11y agohttps://en.wikipedia.org/wiki/Hardware_security_module https://en.wikipedia.org/wiki/Hardware_security_module - since the parent poster seemed to feel the need to use an extremely uncommon acronym to show his or her superiority.
- MichaelGG 11y agoA: It's not an extremely uncommon as acronym and anyone participating in a discussion on key management probably knows it. B: It's best to assume a commenter is acting in good faith and not trying to show off their "superiority".
- __david__ 11y agoThanks for the link! > since the parent poster seemed to feel the need to use an extremely uncommon acronym to show his or her superiority. That was uncalled for, though.
- estsauver 11y agoIt's really not that uncommon. I think "If there's an AWS product for it, it's not that obscure" is a reasonable standard. You could pretty clearly google "keys HSM" and it would show up.
- ajnin 11y agoI don't think that "can be found on Google" is a very good criterion for commonness...
- simoncion 11y agoGiven that there's so much out there to know, and that each field has its own commonly-used acronyms, I do think that if you can find the -correct- definition of an acronym in the first ten Google search results, then (IMO) that acronym is common. As an example: Would you consider RAM to be a common acronym? If you work with computers you're very likely to answer "Yes." or "Hell yes." to that question. But, there are many people out there who have no idea how to expand RAM into its parts, and may not have ever heard the term. Yet, the expansion of RAM is in the top ten Google search results for the term. (It's in my top two.) Additionally, I know what an HSM is, and I don't even work in a field that requires their use.
- MichaelGG 11y agoYeah the fact that it was even possible for dlink to leak keys in this manner just shows how utterly incompetent their engineering is.