3 ms·
This was a great episode, thank you! If you allow me to query on a different oxide topic: I noticed that you provide a certificate to each HSM in every system
by infogulch 4y ago
This was a great episode, thank you!
If you allow me to query on a different oxide topic: I noticed that you provide a certificate to each HSM in every system that is signed by an Oxide Computing root cert. This is pretty neat because, combined with other security features, it enables clients to validate that the running firmware came from you. Have you considered publishing a certificate transparency log of all certificates generated for hardware root of trust HSMs? This would enable customers to ensure they are not using firmware signed using a compromised root certificate. https://eprint.iacr.org/2022/981 https://eprint.iacr.org/2022/981
- bcantrill 4y agoYes, and we really need to do an entire episode (or several!) on how we're tackling that problem. Right now that team is very, very heads-down (as you can imagine, having this apparatus in place is a blocker to start manufacturing), but count on an episode on this in the not-so-distant future!
- infogulch 4y agoI'm glad to hear that, and now I'm excited for a future episode about it!