[dns-operations] HSM recommendations

[John Levine]

In article <CAHw9_i++QY3bvX2XGmrRn2vp-P=fy29vgZ=1+9g+EZgkF0a8FQ at mail.gmail.com> you write:
>The cryptech project is very much designed to be open (so that you can
>build your own / verify what was built), and to not rely on crypto
>magic provided by others. You might not need this level of tinfoil /
>your threat model might differ, but it's a fascinating project, I
>encourage people to look into it and get involved.

Seems to me that if you don't need that level of tinfoil, an old linux
box with one account makes a dandy LSM.

R's,
John