Carl, as far as I understand, Alex meant cert from clipster is generated for combination
of specific hardware such like cpu, MB, HDD, etc., which means it can not be applicable on
another hardware.
Alex, answering your question - no. DoM does not check for private key is using on a
hardware where it was generated or on another one. But as Carl says, you can secure
yourself in a way of HDD encryption
--
Regards, Igor Voytovich
5 ноября 2018, 21:50:32, от "Carl Hetherington via DCPomatic"
<dcpomatic(a)carlh.net>et>:
Hi Alex,
In a nutshell, DCP-o-matic alone is not secure. The private key for your
encryption chain is stored unencrypted on your hard drive.
What attack are you worried about? Somebody stealing your private key and
decrypting DKDMs made for you?
If so, you could encrypt your hard drive. Or we could look at encrypting
those keys somehow.
Kind regards
Carl
On Mon, 5 Nov 2018, alex pagé via DCPomatic wrote:
Hello team,
I tried the system and it's wonderful. Your system is really easy to use.
I would like to start using your system instead of an expensive system (like clipster),
but I'm wondering is DCP-o-matic is really secure or not. I'm wondering how the
certificate of my DCP-o-matic
software is secure. For exemple, on a clipster machine, the certificate is base on a
cheap in my computer so nobody can reproduce my computer to use the DKDM.
Thank you for you help
Alex
_______________________________________________
DCPomatic mailing list
DCPomatic(a)carlh.net
http://main.carlh.net/cgi-bin/mailman/listinfo/dcpomatic