4 ms·
With rack mount HSM, I can monitor for physical access with security camera. When it is on cloud, who knows what?
by j16sdiz 3y ago
With rack mount HSM, I can monitor for physical access with security camera.
When it is on cloud, who knows what?
- lxgr 3y agoThe obvious solution is to use a cloud security camera! It might even be showing a real server rack somewhere.
- Whinner 3y agoCan you trust the security camera isn’t breached and not showing a false stream?
- latchkey 3y agoPretty much the plot of every single bank heist movie.
- nickf 3y ago...and many of the cloud providers with HSM-backed services (Azure KeyVault, AWS KMS) don't give you any verifiable proof. At least with GCP you can download the attestations and verify them with the HSM vendor. With Azure you pay more for HSM-backed keys with no evidence the HSM exists or is in use. Trust, but verify.