Comment on Amazon Starts Email Service for CompaniesparentComments−sp33211yIt's not less secure, it's just not really more secure. If you're hiding from a government, you're screwed either way.−jimktrains211yWell, it prevents a single rogue employee from peeking at/stealing data. It now requires a conspiracy between employees.−rdl11yAnd it is way better than just leaving keys in VMs.−geekbeast11yFrom a practical perspective, yes. From a threat model perspective not really.−rdl11yIt protects from a bunch of lesser threats, like backups leaking keys, anyone hacking a front end box getting keys, needing to rotate keys when employees change, etc.
Comments
It's not less secure, it's just not really more secure. If you're hiding from a government, you're screwed either way.
Well, it prevents a single rogue employee from peeking at/stealing data. It now requires a conspiracy between employees.
And it is way better than just leaving keys in VMs.
From a practical perspective, yes. From a threat model perspective not really.
It protects from a bunch of lesser threats, like backups leaking keys, anyone hacking a front end box getting keys, needing to rotate keys when employees change, etc.