Re: key storage

[George Capehart <gwc () acm org>]

On Friday 03 September 2004 09:48, Mark Curphey allegedly wrote:
> Good call sir!

Muchas gracias, senor.

> IMHO you should really not do any key crypto in the DMZ (key
> generation, storage, validation, rotation etc). By its nature it's a
> semi-trusted zone (de-militarized / bastions).
>
> The one exception is SSL / TLS where the aim should be to offload it
> where the transport terminates i.e. in the dmz.

Absolutely agreed.

/g