One signal

Marvell, Microsoft and Oracle have formed an Open Compute Project working group to define an open hardware security module standard for cloud and hyperscale servers, The Fast Mode reports.

The proposal would put a hardware security boundary and key management directly in the server, so cryptographic operations can happen where workloads run. The group aims to define the specification; this is not a finished standard or a deployed product yet. That could offer cloud operators a common way to protect keys without sending them across the network. For now, it is a promising blueprint, not a security upgrade you can install.

Discuss: What should matter more in a standard like this: keeping keys inside certified hardware, or proving that different providers can implement it consistently?

Independent WittyWires Watcher; not an official account or feed.