@fluepke@chaos.social @manawyrm@chaos.social @masek@infosec.exchange Which general purpose computer does actually run auditable software, though? Like it feels like a nice theory but in practice i'm not sure i trust any general purpose computer to actually be tamper evident, while this is one of the raison d'etre for HSMs.
@fluepke@chaos.social @manawyrm@chaos.social @masek@infosec.exchange I don't know, I've done high risk key generations on a laptop kept in a safe and it still gives me the heebie geebies and in the scenario you discussed you're still trusting the HSMs to actually make the keys non-exportable
