api3dao / airnode

Airnode monorepo
https://docs.api3.org/
MIT License
165 stars 72 forks source link

Hardware security module-based key management solutions are not supported #249

Open bbenligiray opened 3 years ago

bbenligiray commented 3 years ago

The user is expected to provide the master key mnemonic for deployment flexibility (https://github.com/api3dao/airnode/issues/242).

As an alternative, allow the user to use a private key that is stored in a hardware security module-based key management service such as AWS KMS. Note that this will practically result in vendor lock-in, and thus should be preferred only by very specific use-cases.

MrAngus666 commented 3 years ago

In case we want to implement this for multiple providers, we have:

bbenligiray commented 2 years ago

This will be especially useful for HTTP signed data gateway and relayed RRP/PSP users. There is increasing support for ECDSA by cloud providers since this issue was created.

aquarat commented 2 years ago

This task relates: #1443