you are viewing a single comment's thread
view the rest of the comments
[โ€“] 12 points 11 months ago (1 child)

There are customer-managed keys services for all the above. At the same time true zero trust you donโ€™t put them in a repository or service that owns the whole stack

  • source
  • hideshow 1 child comment
  • [โ€“] 4 points 11 months ago

    It's weird how those keys need to be stored SOMEWHERE, especially for public-facing services that need to restart without intervention, and that the only place those keys then live is on some CLOUDACT-impaired service.

    Zero trust is a fun goal we will never really achieve. Get off American pub-cloud providers.

  • source
  • parent