← Back to context

Comment by robertlagrant

2 days ago

> It is a perfect Trojan horse to bypass all encryption

Isn't any hosting provider also this?

Not necessarily.

FaaS: Yes.

IaaS: Only if you do TLS termination at their gateway, otherwise not really, they'd need to get into your operating system to get the keys which might not always be easy. They could theoretically MITM the KVM terminal when you put in your disk decryption keys but that seems unlikely.