We use our own hardware at Fastmail

Re:We use our own hardware at Fastmail by blackqueeriroh on Monday December 23, 2024 @10:44AM (#42495184)

I guess since this is Hacker News, I shouldn’t be surprised that there are a bunch of commenters who are absolutely certain they and their random colo provider will do a better job of defeating the almighty NSA than AWS.

You won’t even know when they serve your Colo provider with a warrant under gag order, and I’m certain they’ll be able to bypass your own “tamper-proof” protections.

[ Parent | on HN ]

Re:We use our own hardware at Fastmail by AtlasBarfed on Thursday December 26, 2024 @03:24AM (#42513880)

Soo..... you're saying that KMS hardware key generation isn't that great anyway...

so, again, why bother with KMS? What does it offer?

My point about the hardware was asking why KMS hardware key generation has any real value vs a software generated key, and then why bother with KMS and its limited secret size, and you access KMS with a policy/security user or role that can be used equally to lock down S3?

What is the value of KMS?

[ Parent | on HN ]