/plushcap/analysis/cloudflare/keyless-ssl-supports-fips-140-2-l3-hsm

Keyless SSL now supports FIPS 140-2 L3 hardware security module (HSM) offerings from all major cloud providers

What's this blog post about?

Cloudflare has announced support for cloud-hosted Hardware Security Modules (HSMs) from major providers, including Amazon Cloud HSM, Google Cloud HSM, IBM Cloud HSM, and Microsoft Azure Dedicated HSM and Managed HSM. This update enables customers with strict information security policies to use private encryption keys stored in these HSMs for securing HTTPS connections at Cloudflare's global edge. Keyless SSL is a protocol that allows TLS handshakes without access to the customer's private keys, mitigating risks associated with key handling and storage. The integration of cloud-hosted HSMs offers enhanced security options for financial services, healthcare, cryptocurrency, and other highly regulated or security-focused companies moving to the cloud.

Company
Cloudflare

Date published
March 27, 2021

Author(s)
Patrick R. Donahue, Dina Kozlov

Word count
1795

Hacker News points
3

Language
English


By Matt Makai. 2021-2024.