Block-signing key off-node

Question

A high level of security is essential for private keys. Fortunately, it is possible to sign transactions with keys that are stored on a HSM. However, is the same also possible for signing blocks, as part of the multichain 'mining' process?

Answer 1

There isn't currently a mechanism for doing this, because block generation is automated, unlike transaction creation. So it would need to be an HSM that is permanently connected to the node's server, and which would sign transactions without a human approving anything. This undermines quite a bit of the whole point of using an HSM.