On 06/01/2025 14:46, Thomas Kuechenthal wrote:
Hi Guys,
a happy new year to all of you!
Due to policy reasons we need to make knot use a HSM in the future. Is
anybody successfully using some cloud based HSM services like Google
Cloud HSM for DNSSEC signing?
I didn't realize that cloud HSMs are a thing. However we did very
briefly think that a network HSM accessible by multiple signers would be
a possible solution for Multi-Signer DNSSEC RFC8901. So I would be
interested the hear of any experience people have with these.
regards
John
--
John Dickinson
Sinodun Internet Technologies Ltd.