Re: starting up servers that need access to secrets

[Ted Lemon]

> I believe better protection would be to
> keep private keys on external tamper-evident hardware.

This is certainly true.  However, if somebody compromises your system
with the smart encryption card, then they can probably use the card to
sign things.  This isn't as good as having your key, since if you can
close the hole you don't necessarily have to repudiate the key
(although you probably should).  There's no perfect solution, of
course.  All of the solutions we've talked about make sense given
different cost/benefit scenarios.

                               _MelloN_