3 ms·
If I understood it well, the main security concerns are moved to the KMS, that you must refer is not susceptible to the same kind of attacks that they describe
by merqurio 8y ago
If I understood it well, the main security concerns are moved to the KMS, that you must refer is not susceptible to the same kind of attacks that they describe (untrusted environments, potentially with unknown database administrators, server administrators, OS and hypervisors). I have not a vast experience with KMSs, what would be your approach to deploy one you can trust in a cloud environment, deploying it on bare metal?
- Inflatablewoman 8y agoIf you have one backed by a HSM (Hardware Security Module) then you could be in a good spot. Similar set up to what AWS KMS does. https://aws.amazon.com/kms/details/ https://aws.amazon.com/kms/details/