3 ms·
So they're using a HSM to protect the SSL key this time. Makes me wonder how many HSMs out there are already backdoored.
by mike-cardwell 10y ago
So they're using a HSM to protect the SSL key this time. Makes me wonder how many HSMs out there are already backdoored.
- cuckcuckspruce 10y agoMy mind tells me that it's not a large amount, but given that the USG has a track record of intercepting routers in the mail and installing surveillance software in them, my guts tell me to be very wary.
- nikcub 10y agoThe whole point of an HSM is that you can't physically tamper with it. Vendors also provide ways to validate HSM's https://www.thales-esecurity.com/msrms/validate https://www.thales-esecurity.com/msrms/validate