3 ms·
When the question is "how do I communicate securely with a third party," there's nothing you can do if the third party in question gets possessed by a demon and
by fwip 9mo ago
When the question is "how do I communicate securely with a third party," there's nothing you can do if the third party in question gets possessed by a demon and turns evil. (Which is what happens if an attacker has root.)
- otabdeveloper4 9mo agoIncorrect. Random sysadmins who have access to your server have the permissions to steal whatever is communicated between third parties unrelated to this sysadmin. Just because some random outsourced nightshift dude has the permissions to do "sudo systemctl restart" shouldn't mean he gets to read all the secret credentials the service uses. As it is now, the dude has full unfettered access to all credentials of all services on that machine.
- deleted 9mo ago[deleted]
- fwip 9mo agoI guess if your org usually gives the keys to the castle to random idiots, then yeah, I can see why you'd wish the master key didn't exist.