[Opendnssec-user] Network enabled SoftHSM

Marco Davids (SIDN) marco.davids at sidn.nl
Tue Apr 12 13:06:03 UTC 2011

On 04/12/11 14:55, Rickard Bellgrim wrote:

> On 12 apr 2011, at 13.54, Casper Gielen wrote:
>> I post this now because I'm looking for feedback on the general design 
>> and I hope that other users will be able to help me develop this into
>> a complete solution.
>> If anybody knows of any other way of doing PKCS11/(soft)HSM over the 
>> network I would be interested to know about it.
> This sounds really interesting. Great that you are doing this work. Your design is similar to what we have been discussing about. Are you going to release your work somewhere?

How about a 'sleek design' HSM appliance? I know of at least one company
in China that is specialized in helping you with that:


Just kidding, off course. On the other hand... mmmm.... there may be a
market for affordable, open-source based HSM-devices, or even entire
DNS(SEC) appliances?




More information about the Opendnssec-user mailing list