Hacker News new | ask | show | jobs
by CiPHPerCoder 741 days ago
> I find it very hard to believe Amazon's or Google's servers do not already have full disk encryption.

I am confident that they do. Even better, they can be configured to use your KMS key rather than the service key, and you can configure KMS to use external key stores (i.e., an HSM in your datacenter outside of AWS's control, that you could theoretically pull the plug on at any time).