Protecting encryption server
Marcus Kvarnström
marcus at haget.se
Tue Jul 28 12:46:41 CEST 2020
On Jul 27 11:34 Ayoub Misherghi via Gnupg-users <gnupg-users at gnupg.org> wrote:
>I am going to have a server machine doing encryption. How do you protect against server operator or admin tampering. This
> is a scenario where internal threat or hostility is high; you cannot trust your own guys. (Real situation; not paranoid.)
A question maybe beyond the scope of GnuPG and the list. But I suggest you implement the appropriate security controls in your IT-infrastructure.
You can for example check out the NIST Cybersecurity Framework for guidance.
// Marcus
More information about the Gnupg-users
mailing list