3 ms·
Question is, in which aspects you have to actually trust - with no verification or no ability to enforce - the intermediary behavior? How costly would be to avo
by avmich 7y ago
Question is, in which aspects you have to actually trust - with no verification or no ability to enforce - the intermediary behavior? How costly would be to avoid having trust necessary?
- cameronbrown 7y agoMy opinion as I stated before, is to follow the money trail. I'd trust Digital Ocean or Rackspace over Azure, for example, because Microsoft does get some money from advertising/tracking. If you're terminating TLS directly in 'your' cloud VM in Azure/GCP/AWS, I think that's an acceptable boundary as I don't believe these companies would risk accessing customer VMs (since it's not worth the backlash they'd receive in return from being discovered).