<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">It is important that heavy smoke comes out of the unit when destroyed — otherwise nobody will believe it was the real one.<div class=""><br class=""></div><div class="">Daniel<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 1 Feb 2018, at 16:37, Joao Damas <<a href="mailto:joao@bondis.org" class="">joao@bondis.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Actually it isn’t such a bad idea.<div class="">We could verify, for everyone to see, that the types of manipulation that are supposed to trigger the anti-tampering on the HSMs work as expected. For instance, open the device and verify it self erases. Same for strong vibration (and here is where the hammer comes in handy).<div class=""><br class=""></div><div class="">Joao<br class=""><div class=""><br class=""><blockquote type="cite" class=""><div class="">On 1 Feb 2018, at 15:32, Nicolas Antoniello <<a href="mailto:nantoniello@gmail.com" class="">nantoniello@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline" class="">May we hammer it while connected (just to see what happens) ?</span><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial" class="">... ok, I´m a kid... my fault !</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial" class="">:P</div><br class=""></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Thu, Feb 1, 2018 at 11:02 AM, Vladimír Čunát <span dir="ltr" class=""><<a href="mailto:vladimir.cunat+ietf@nic.cz" target="_blank" class="">vladimir.cunat+ietf@nic.cz</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 02/01/2018 03:19 AM, John Levine wrote:<br class="">
>> Favourite line:<br class="">
>><br class="">
>> "9. CA and Contractor performs the destruction of each HSM part repeatedly."<br class="">
> Huh. I would have expected at least the HSMs get to have a last meal.<br class="">
<br class="">
What's "meal"? Do you suggest an electric chair?<br class="">
<br class="">
______________________________<wbr class="">_________________<br class="">
dns-operations mailing list<br class="">
<a href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@lists.dns-oarc.<wbr class="">net</a><br class="">
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operationsdns-operations" rel="noreferrer" target="_blank" class="">https://lists.dns-oarc.net/<wbr class="">mailman/listinfo/dns-<wbr class="">operations<br class="">
dns-operations</a> mailing list<br class="">
<a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" rel="noreferrer" target="_blank" class="">https://lists.dns-oarc.net/<wbr class="">mailman/listinfo/dns-<wbr class="">operations</a><br class="">
</blockquote></div><br class=""></div>
_______________________________________________<br class="">dns-operations mailing list<br class=""><a href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@lists.dns-oarc.net</a><br class=""><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br class="">dns-operations mailing list<br class=""><a href="https://lists.dns-oarc.net/mailman/listinfo/dns-operations" class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations</a><br class=""></div></blockquote></div><br class=""></div></div></div>_______________________________________________<br class="">dns-operations mailing list<br class=""><a href="mailto:dns-operations@lists.dns-oarc.net" class="">dns-operations@lists.dns-oarc.net</a><br class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br class="">dns-operations mailing list<br class="">https://lists.dns-oarc.net/mailman/listinfo/dns-operations<br class=""></div></blockquote></div><br class=""></div></body></html>