Post from 2026-10-20 19:19:03

@q3k @jaseg AFAIK these devices can generate cryptographic attestations about the origin of a key (was it HSM generated or not). With that it feels more like a process flaw that this property wasn't checked when submitting the CSR.

permalink | main