Protecting Sensitive Credentials by Sharing Secrets in the Cloud

In the life of many organizations, developers and operations people need credentials that they can use in case of emergency — when, for example, your external authentication services (either your multifactor service or your internal directory) experience an outage. The existence of these accounts presents a problem, however: one of the best ways for an adversary to ruin your organization is to compromise the login credentials of an account that is on every machine in your cloud.

Read more “Protecting Sensitive Credentials by Sharing Secrets in the Cloud”