Cloud security harder than ‘encrypt everything’
March 22, 2016
Grazed from TheRegister. Author: Richard Chirgwin.
Australia’s wildly-enthusiastic adoption of cloud computing is providing the rest of the world a crucible in which a host of security challenges can be cultured, according to F5 security researcher David Holmes. Speaking to The Register’s networking desk while visiting the antipodes, Holmes said that “Australia is becoming the great laboratory” of cloud-first strategies, and along the way, encountering a fair amount of first-adopter security pain.
The pain is especially acute, Holmes said, for a customer that wants to spread the same service across different clouds (which is a sensible resilience strategy). “Customers want to spin up the same service on different clouds, but at the same time, they want to encrypt everything”, he said…
That’s not as easy as it sounds, for example, for a user running SSL/TLS-based encryption: “The certificates are bound to host names, but [the user] wants to move the service between different clouds…
Read more from the source @ http://www.theregister.co.uk/2016/03/22/cloud_security_harder_than_encrypt_everything/