4 ms·
But if you have your authentication server, that server becomes a target. And unless you're using an HSM under the hood, you're still exposed to hashes being st
by alex_duf 9y ago
But if you have your authentication server, that server becomes a target. And unless you're using an HSM under the hood, you're still exposed to hashes being stolen.
I think the idea of the author is to protect the operation with hardware.
- tptacek 9y agoA dedicated AuthN server presenting only a trivial interface built on a minimal-runtime memory-safe language with no shared database is an extremely hard target. Not that either outcome is likely, but a reasonable person can argue that you are more likely to make a mistake implementing HSM-augmented password hashing on a general-purpose app server than you are to screw up a dedicated Java AuthN server. "Hardware" isn't magic. The magic power of an HSM isn't the hardware; it's the minimalized attack surface of the software.