3 ms·

Well, it prevents a single rogue employee from peeking at/stealing data. It now requires a conspiracy between employees.

• rdl 12y ago
  And it is way better than just leaving keys in VMs.
  • geekbeast 12y ago
    From a practical perspective, yes. From a threat model perspective not really.
    • rdl 12y ago
      It protects from a bunch of lesser threats, like backups leaking keys, anyone hacking a front end box getting keys, needing to rotate keys when employees change, etc.