[tbh]

Hetzner provide a lot of physical machines too, I believe this is what the other poster was talking about.

[FooBarWidget]

Physical machines don't prevent keys from leaking out. A physical attacker can analyze power usage usage patterns to extract the encryption key. :)

[lawl]

I don't think you have that sidechannel with AES-NI. Besides, as a physical attacker cold boot attack would be much easier Or if the server has any interfaces with DMA, like PCI or something, that's even easier.

[epochwolf]

Wouldn't that require physical access?

[epochwolf]

Ah, I missed the physical machines. No hypervisor to crack, just out of band management cards. :)