On 06/01/2025 14:46, Thomas Kuechenthal wrote:
  Hi Guys,
 a happy new year to all of you!
 Due to policy reasons we need to make knot use a HSM in the future. Is
 anybody successfully using some cloud based HSM services like Google
 Cloud HSM for DNSSEC signing?
  
I didn't realize that cloud HSMs are a thing. However we did very
briefly think that a network HSM accessible by multiple signers would be
a possible solution for Multi-Signer DNSSEC RFC8901. So I would be
interested the hear of any experience people have with these.
regards
John
--
John Dickinson
Sinodun Internet Technologies Ltd.