Running Secure Server Software on Insecure Hardware Without Parachute

[geal]

This is a really interesting perspective. THe most important secret you have to manage is often the private key used for TLS, but in usual architectures, it must be present on all of your front servers.

This is a good way to compartmentalize the system, for a very small cost in performance.

[atoponce]

I can't read a single word on that slide. Someone have the text?

[andor]

PDF: http://www.rsaconference.com/writable/presentations/file_upl...

Video: http://www.youtube.com/watch?v=cd5S0_93n9o

[lvh]

In case anyone tries to download the PDF and work from there: the embedded image appears to be low resolution raster, so that doesn't work either :(