7 Jan
2016
7 Jan
'16
4:13 p.m.
I don't
trust the vendor's internal security to keep the key from
leaking and I don't trust the vendor's HR security to prevent
malware authors from making it to the inside, and I *sure* don't
trust the vendor to resist a request from law enforcement [...]
I don???t know if
it???s typical or not, but every company that
I???ve worked for that has managed crypto-keys has taken key security
*very* seriously.