Comment on Amazon Starts Email Service for CompaniesparentComments−superuser211yit should be impossible for them (or for nCipher) to do so.Why does it matter? They can certainly be compelled to use the HSM to decrypt data, even if they can't extract keys.−geekbeast11yThis.If you aren't doing client-side encryption and keeping the keys private, the server has access one way or another.
Comments
Why does it matter? They can certainly be compelled to use the HSM to decrypt data, even if they can't extract keys.
This.
If you aren't doing client-side encryption and keeping the keys private, the server has access one way or another.