3 ms·

I'm curious how startups or venture capitalists handle risk around DevOps, especially certificates, encryption keys, access to dns/domain names etc. Legal proc

by sbr464 8y ago

I'm curious how startups or venture capitalists handle risk around DevOps, especially certificates, encryption keys, access to dns/domain names etc. Legal processes take time, you typically need this info quickly in production. I'm not a VC, but if I was, I would want a backup plan in place before handing over an XX Million $ check. A smaller startup, or a seed level/pre-launch team may only have 1 or 2 founders with "admin" level access to this info. I always thought a "Swiss bank account" type service for DevOps would be useful. It could handle this situation in a modern way (with a secure, modern API etc) and would execute a certain disaster recovery plan reliably. Obviously centralizing that kind of data/ would be a security nightmare in itself. I'm curious how a larger VC with many companies deals with this consistently. I know there are services available in different areas that specialize in handling certain data (corporate branding/identity, domain names etc) but not as a whole.

pm90 8y ago
> Swiss bank account" type service for DevOps What does this mean? That nobody has access to production systems except devops?
- sbr464 8y ago
  For example, there is a copy of the most core encryption keys, certificates/passwords etc, stored with a 3rd party, who is specialized in dealing with this kind of info in a modern way. Similar to how a Swiss bank is familiar with storing valuables/currency or executing a will. This type of service would need to be modern in the sense the info can be updated over an API etc. Anyone can create a DR plan and handle these issues, but then it isn't consistent, especially from a partner (VC etc) perspective.