Confidential Computing: Who Can See Your VM’s Memory?

So Bob, what are the workloads that you're gonna see people kinda gravitate first for this type of capability?

Well, something like this, and so, uh, uh, we're talking about trust, basically.

The...

So what Nick is describing is, is known as a trusted execution environment or a TEE, you know? And so your question about encryption, is this a memory encryption? Yes.

You know, but it's also can we trust the platform that it's on? Can we trust the configuration? Things like that.

And so workloads that...

You know, what are your most important workloads? What are the import, uh, workloads that you have that have the most, uh, the data that you want to r- to remain secure? And this is heavy duty security here.

This is heavy duty attestation, all that stuff.

And so, you know, you pick your most important workloads.

You can turn it on for everything-

Yeah, yeah

...

if you wanted to, but there are some caveats to that.

You know? The, the, no security is ever...

It's always a trade-off-

Yeah, yeah

... with stuff, and so...

And we can talk about that in a second.

But, you know, people would target this for their big important things, processing credit card information, things that they don't want.

Uh, they wanna reduce the risk of, uh, information leak or something.

Things that have compliance leak concerns.

What about also, like, uh, secret stores? So, uh-

Secret stores? Yes.

It's-

So, uh, uh, for instance, a domain controller, or, uh, I've got a load balancer that's holding in my wildcard cert to my domains.