We use our own hardware at Fastmail

Re:We use our own hardware at Fastmail by Xylakant on Sunday December 22, 2024 @03:11PM (#42488726)

There are many kinds of secrets that are used for purposes where they cannot be derived from customer secrets, and those still need to be secured. TLS private keys for example.

I do disagree on the second part - there’s a world of a difference whether an attacker obtains a copy of your certificates private key and can impersonate you quietly or whether they gain the capability to perform signing operations on your behalf temporarily while they maintain access to a compromised instance.

[ Parent | on HN ]

Re:We use our own hardware at Fastmail by evantbyrne on Sunday December 22, 2024 @09:29PM (#42491190)

It's all unencrypted secrets from perspective of an attacker. If they somehow already have enough access to read your environment variables, then they can definitely access secrets manager records authorized for that service. By all means put secrets management in a secondary service to prevent leaking keys, but you don't need a cloud service to do that.

[ Parent | on HN ]