Thank you for sharing your suggestions and thoughts. I am working with
Julius on a project and, after discussing it a bit, we really like the
idea of making privilege separation for private keys in LibreSSL. First,
it solves the problem when running on a non-virtualized OpenBSD. Second,
it establis
Hello,
I would like to keep the TLS server private key in a hardware enclave, such
as Intel SGX. I found a solution - TaLoS (https://github.com/lsds/TaLoS),
which is a fork of LibreSSL.
Have you considered merging TaLoS or implementing something along these
lines in LibreSSL?
Thank you and rega