Subject: [Rats] Securing server keys

From: Anders Rundgren <[email-masked]>
Date: Wed, 6 Oct 2021 07:33:10 +0200

Hi List;
This is an off-topic posting but maybe you guys have an idea about this anyway? :)
There are tons of applications out there that depend on private or secret keys for securing server-to-server communication.

This is a typical configuration:

  // Application certificate
   cert: fs.readFileSync('cert.crt'),
   // Private key associated with application certificate
   key: fs.readFileSync('key.pem'),
   // Public certificate chain.
   ca: fs.readFileSync('ca.pem'),

Obviously hardware protected keys of the type RATS are dealing with are still out of reach for people who are not experts.

Open question: How do you envision that this problem could be addressed?

Since the "perfect" solution (for practical purposes) is not available, could something along the lines of
https://www.segger.com/products/connectivity/emusb-device/add-ons/ip-over-usb/
be of any use?

thanx,
Anders