4 ms·
If you have to do local signing at some point, then an offline HSM protected by a quorum of unlock keys would be one way to make sure your key won't end up some
by munchbunny 7y ago
If you have to do local signing at some point, then an offline HSM protected by a quorum of unlock keys would be one way to make sure your key won't end up somewhere you didn't intend and is resistant to single internal compromised employees. Crack open the safe, take out the HSM, turn it on, sign the build, and then put the HSM back into its safe. If you want to go the extra mile, some of the HSM's have ways to generate the same key onto two HSM's, and you can put the second one in a bank vault for backup.