Signing TLS Handshakes Inside a TPM: Hardware-Bound Keys in Go
A recent post by Christian Bshaatsbergen walks through a technique more Go developers should know: terminating TLS with a private key that exists only inside a TPM and never touches process memory. The post, Signing TLS handshakes inside a TPM, demonstrates the whole chain with a small library, and the mechanics are worth unpacking. Why […]