News for hackers. Stuff that matters.

A comment on Ask HN: How does your company manage its encryption keys?. Parent comment

Re:Ask HN: How does your company manage its encryption keys? by hn_throwaway_99 on Tuesday June 02, 2020 @02:43PM (#23394586)
> Or do KMS users just take on faith that AWS will always be there?

I don't take on faith that they'll always be there, but I do believe that if for whatever (extremely highly unlikely) reason they did go away that they'd make it possible to get my keys, or give me enough notice so I could re-encrypt with other keys.

Face it, when running a business there is a ton of trust you have to put in 3rd parties (banks, insurers, your employees, the government, etc.) Yes, you should always evaluate the trustworthiness of 3rd parties, but AWS going away and deleting my keys is probably #6327 of things I worry about.

[ Parent | on HN ]
Re:Ask HN: How does your company manage its encryption keys? by yencabulator on Wednesday June 03, 2020 @01:25AM (#23400102)
> if for whatever (extremely highly unlikely) reason they did go away that they'd make it possible to get my keys,

It is a very common design criteria for a HSM to not be able to do that, no matter how willing.

[ Parent | on HN ]