Hi guys,
With the way HekaFS is encrypting data (tenant specific certs), it's pretty clear the data will be safe "at rest".
How do we protect against the hosting provider from reading certs/keys out of tenant memory while it's running, and keeping them for later?
Asking because apparently it isn't hard to extract encryption passwords from traditional encrypted file systems if they're running in a VM (and you're superuser on the host). So, same thought, but with the certs.
?
CC'd Richard Jones, as he pointed out the password extraction thought to me ages ago, and is more across this kind of thing.
Regards and best wishes,
Justin Clift
-- Aeolus Community Manager http://www.aeolusproject.org