For our project we are using a 3rd party application (installed on their cloud). For crypto purposes, this application requires to access the HSM that is located in our LAN.
So in terms of security I was wondering:
- What risks we would take if the HSM would be accessible through the internet via VPN (considering that all enc/dec are done by HSM)?
- Whether this configuration would work?
<Internet><FW><Reverse Proxy><FW><HSM><FW><LAN>
Thanks in advance for your help