3 ms·
Isn't that the point of HSMs where nobody can get access to retrieve the private key - all you can do is sign stuff with the key?
by arethuza 8y ago
Isn't that the point of HSMs where nobody can get access to retrieve the private key - all you can do is sign stuff with the key?
- PeterisP 8y agoYup, but even in cases where the expense of a proper HSM isn't warranted, you can set up a software solution/process that works in a similar manner to a HSM, just with less tamper-resistance.
- arethuza 8y agoOf course even if you have HSMs there is still the issue of controlling access to the HSMs!