3 ms·
> that can attest VM's identity in front of third parties, or any way to securely introduce secrets into VMs The last thing I want is for a hypervisor to handl
by justsomehnguy 2y ago
> that can attest VM's identity in front of third parties, or any way to securely introduce secrets into VMs
The last thing I want is for a hypervisor to handle some secrets or manage identities.
This is OS/app level job, not a HV one.
- sofixa 2y agoAnd how does the OS/app prove who it is? How do you get the secret zero inside? You can orchestrate something with your config management tool, but there's no nice way of doing it without having to also handle rotation afterwards. It works marvelously in AWS, GCP, Azure. It allows for an extremely secure and low maintenance solution to that existential issue. It's a perfect thing for the platform to handle for you.