News for hackers. Stuff that matters.

A comment on Bring your own key was a lie. Parent comment

Re:Bring your own key was a lie by amelius on Thursday October 13, 2022 @05:37AM (#33189009)
And also it is another line of defense, which can only improve security, not worsen it.
[ Parent | on HN ]
Re:Bring your own key was a lie by Rygian on Thursday October 13, 2022 @06:15AM (#33189236)
I agree, it's defense in depth.

However, suppose I'm a famous carmaker [1]. What are the chances that I screw up and publish my CMK in a public repo, compared to the chances of my CSP screwing up and publishing my tenant's PMK on a public repo?

[1] https://news.ycombinator.com/item?id=33155138

[ Parent | on HN ]