4 ms·
I saw a talk by a woman who worked at a PKI auditing firm. She said they have a special hardware appliance that stores the keys, which of course costs an exorbi
by mjgoins 18y ago
I saw a talk by a woman who worked at a PKI auditing firm. She said they have a special hardware appliance that stores the keys, which of course costs an exorbitant amount, and has a redundant copy or three. I don't remember the details, but google away.
She mentioned that the machine wasn't even on a network, but I don't know why they would bother going that far.
- olefoo 18y agoBecause if that little bit of secret gibberish (the private key for the root cert) were known to the wrong people it incurs liability in the billions of dollars. And an air gap is cheap and effective protection.
- wallflower 18y ago> that little bit of secret gibberish That makes me wonder if root keys are some of the most valuable information in the world (in terms of financial value per bit).