<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 09/06/17 09:27, Barry O'Donovan
      wrote:<br>
    </div>
    <blockquote cite="mid:59AF956F.5030107@islandbridgenetworks.ie"
      type="cite">
      <pre wrap="">This looks like an interesting project but I cannot recommend or advise
avoidance:

<a class="moz-txt-link-freetext" href="https://cryptech.is/">https://cryptech.is/</a>
<a class="moz-txt-link-freetext" href="https://ripe69.ripe.net/presentations/136-141106.ripe-cryptech.pdf">https://ripe69.ripe.net/presentations/136-141106.ripe-cryptech.pdf</a>

I'd be interested in anyone's experience / thoughts on this.


Also the new emergence of cloud based services:
<a class="moz-txt-link-freetext" href="https://aws.amazon.com/cloudhsm/">https://aws.amazon.com/cloudhsm/</a>
</pre>
    </blockquote>
    aws cloudhsm used to be ran on Safenet hardware, i wonder what they
    use now<br>
    <br>
    <p><b>Q: Will my Safenet-based HSMs be retired?</b></p>
    <p>No. While we believe the feature set and cost of the new CloudHSM
      service offer a far more attractive alternative, we will maintain
      AWS CloudHSM Classic for existing customers. Resources will be
      available shortly to assist in migrating from CloudHSM Classic to
      the new service.</p>
    <a class="moz-txt-link-freetext" href="https://aws.amazon.com/cloudhsm/faqs/">https://aws.amazon.com/cloudhsm/faqs/</a><br>
    <br>
    <br>
    <blockquote cite="mid:59AF956F.5030107@islandbridgenetworks.ie"
      type="cite">
      <pre wrap="">
 - Barry


</pre>
      <blockquote type="cite">
        <pre wrap="">Bill Woodcock wrote:
</pre>
        <blockquote type="cite">
          <blockquote type="cite">
            <pre wrap="">On Sep 5, 2017, at 12:25 PM, Brett <a class="moz-txt-link-rfc2396E" href="mailto:brettcarr@gmail.com"><brettcarr@gmail.com></a> wrote:

It's been a long time since I looked at HSM's (my previous
experience is with Sun (PCI) and Thales (Network), but this was
all a few years ago now. What is popular these days and is there
any that anyone would particularly avoid or recommend.
</pre>
          </blockquote>
          <pre wrap="">We have a fleet of AEP Keypers, which we’ve been extraordinarily
happy with.  They’ve worked exactly as advertised, without any
hiccups, and AEP’s support has been outstanding, when we’ve wanted
to do things outside-of-the-ordinary.  I think we’re signing ~100
TLDs with them, been using them for about six years, just finished
a rotation out for their routine-service and battery replacement,
all of which went smoothly.

-Bill






_______________________________________________ dns-operations
mailing list <a class="moz-txt-link-abbreviated" href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a> 
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a> 
dns-operations mailing list 
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a>
</pre>
        </blockquote>
      </blockquote>
      <pre wrap="">_______________________________________________
dns-operations mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dns-operations@lists.dns-oarc.net">dns-operations@lists.dns-oarc.net</a>
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a>
dns-operations mailing list
<a class="moz-txt-link-freetext" href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a></pre>
    </blockquote>
    <p><br>
    </p>
  </body>
</html>