> Be trustee is a key to use HSM or hardware encryption. And because we > are running a critical Internet infrastructure, I think should be the > way, be trustee.
that's called security theater. what is the threat model? what is the asset you are protecting against what attack by what adversary? [ if the cost of the hsm is zero, it adds complexity and hence is a security problem not a security solution ] randy _______________________________________________ dns-operations mailing list [email protected] https://lists.dns-oarc.net/mailman/listinfo/dns-operations dns-jobs mailing list https://lists.dns-oarc.net/mailman/listinfo/dns-jobs
