On Wed, Oct 26, 2011 at 06:17:28AM +1100, Justin Clift wrote:
How do we protect against the hosting provider from reading certs/keys out of tenant memory while it's running, and keeping them for later?
I think the answer is ... you can't.
Unless someone invents practical fully homomorphic encryption.
However providers like Amazon are offering guarantees (unverifiable) that they take this sort of security seriously: https://aws.amazon.com/security/
Rich.