Look, you're a single person. You're running off-the-shelf software and

Question

Look, you're a single person. You're running off-the-shelf software and

using off-the-shelf hardware. You're not the only one doing so, so targeted attacks with that are impossible. Not to mention that nobody cares about your keys. If you were to be running a CA then yes, then it starts to matter, and securely storing the CA keys is imperative. I operate some CA's and I can say with reasonable confidence that while the security policies are usually a bit different, those keys are also stored on off-the-shelf hardware. Not the same hardware as yours probably but still. And if you want to protect your key from anyone? Nothing stops you from storing it on a LUKS-encrypted flash drive and taking it out when not needed. That's what an airgap is. And for production CA's that usually means not turning on the CA server when not needed. Done! You can be confident that nobody can access your key. But does it really matter for a single person? No.

0

25.04.2020

2 ответов

17 просмотров

XZainethe Ombperettasciente LeGraetta

CA is a docker container htat is only turned on for signing requests

0

25.04.2020

Пользователь 61654 · Accepted Answer

Пользователь 61654

keys are not protected in all steps and you can't be sure about all of your softwares and you also need to think about your hardware which is out of your control. anyways i won't trust and you are free

0

25.04.2020

Похожие чаты

Look, you're a single person. You're running off-the-shelf software and

2 ответов

Похожие вопросы