[dns-operations] Destroying HSMs

[Joao Damas]

Actually it isn’t such a bad idea.
We could verify, for everyone to see, that the types of manipulation that are supposed to trigger the anti-tampering on the HSMs work as expected. For instance, open the device and verify it self erases. Same for strong vibration (and here is where the hammer comes in handy).

Joao

> On 1 Feb 2018, at 15:32, Nicolas Antoniello <nantoniello at gmail.com <mailto:nantoniello at gmail.com>> wrote:
> 
> May we hammer it while connected (just to see what happens) ?
> ... ok, I´m a kid... my fault !
> :P
> 
> 
> On Thu, Feb 1, 2018 at 11:02 AM, Vladimír Čunát <vladimir.cunat+ietf at nic.cz <mailto:vladimir.cunat+ietf at nic.cz>> wrote:
> On 02/01/2018 03:19 AM, John Levine wrote:
> >> Favourite line:
> >>
> >> "9. CA and Contractor performs the destruction of each HSM part repeatedly."
> > Huh.  I would have expected at least the HSMs get to have a last meal.
> 
> What's "meal"?  Do you suggest an electric chair?
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net <mailto:dns-operations at lists.dns-oarc.net>
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-operations> mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations <https://lists.dns-oarc.net/mailman/listinfo/dns-operations>
> 
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net <mailto:dns-operations at lists.dns-oarc.net>
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-operations mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20180201/da7b6b3c/attachment.html>