3 ms·
That price point needs to come way down. Yubico thinks they're competing with established HSM vendors, but they're really competing with their own products. If
by excalibur 9y ago
That price point needs to come way down. Yubico thinks they're competing with established HSM vendors, but they're really competing with their own products. If I have a small business and am considering a hackish YubiKey-as-HSM for $40, it may be worth it to spend around $100 on an officially supported YubiHSM instead.
- closeparen 9y agoIf $650 is a lot for your business, wouldn’t you just keep the keys on disk? Hardware-based security implies that you have a compliance regime to satisfy, or at least something valuable to protect.
- lwhalen 9y agoAgreed. For even a small tech business, $650 should be in the 'lol whatever' category of purchasing - especially if there's compliance regimes mandating some kind of HSM in the stack.
- kondor6c 9y agoHowever, this device lacks FIPS 140-2 certification of any type, which is a huge detractor for any company wanting to shovel that kind of money towards a solution. I checked the "NIST List" (rhymes haha), and they might have this module under evaluation: https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List https://csrc.nist.gov/Projects/Cryptographic-Module-Validati...
- closeparen 9y agoFIPS certified HSMs cost 10-100x what the YubiHSM does.
- StavrosK 9y agoWhy aren't they competing with established vendors?
- deleted 9y ago[deleted]