Hacker News new | ask | show | jobs
by 9dev 1425 days ago
But what if I don’t even need a HSM, but just somebody to store a CA certificate for me? Even if they just put it onto some storage and encrypt it with a KMS key, that’s more than enough for a vast amount of use cases. I don’t need government grade security. I just have some internal services that need to use a trusted certificate, and don’t want to maintain a server with storage myself, just for that.

I could build that service in a weekend(tm)!

1 comments

So encrypt it with KMS and store it in S3.