2 votes
Accepted

What is the right way to transfer public-private keypairs over intranet?

As a general rule, you don't. Private keys aren't supposed to leave the device where they're generated. If RSA keys are too expensive to compute, you might be able to make it work with elliptic curve /...
user avatar
  • 38.9k
2 votes

Should Subordinate CAs on separate domains point to one location for CDP and AIA?

It's up to you. In some cases, it is reasonable to use centralized storage for certificates and CRL. If CAs maintained by different teams, it may be reasonable to have dedicated storage for every CA. ...
user avatar
  • 5,395
1 vote

Best practice for "stateOrProvinceName" in certificate

Which acronyms should we allow when it comes to accepting certificates? neither. See below. I guess that OID's have also been specified, would it be an idea to use those instead of the acronyms. in ...
user avatar
  • 5,395
1 vote

How do centralized crypto exchanges store seed phrases and users' private keys?

And these seed phrases will be stored in an HSM It's a misuse and most likely completely impractical. HSMs are not for storing large amount of arbitrary data, they are optimized to store a finite ...
user avatar
  • 4,608

Only top scored, non community-wiki answers of a minimum length are eligible