Hacker News Reader

IDK, pre-windows-10 didn't you just need a ~$200 [1] code signing certificate? Do people usually buy HSMs to store those?

[1] https://www.sslshopper.com/microsoft-authenticode-certificat...

View on HN

You do not store certificates on an HSM, you generate the private key on it and use that to sign things. Certificates that end up in actual use are further many chains removed from the root keys.

> Do people usually buy HSMs to store those?

At the time Stuxnet was around, no, not really.

Reply on news.ycombinator.com