MTLS with keys never leaving the TPM
Details
- External ID
- 49062316
- Source
- HN
- Company
- —
- Product
- MTLS with keys never leaving the TPM
- Website domain
- github.com
- Launched
- July 26, 2026
- Cohort
- —
- Upvotes
- 5
- Upvotes percentile
- 0.1081242532855436
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:26 p.m.
- Updated at
- Sept. 7, 2026, 9:26 p.m.
Enrichment
- Theme
- custom keyboards and input controllers
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- mtls key management with tpm
- Manually corrected
- False
Could you build this?
Partial Building a client tool that configures mutual TLS is straightforward, but integrating directly with TPM 2.0 cryptographic primitives without leaking private keys requires specialized security systems engineering.
What it would actually take: The system requires interacting with the TPM2 TSS (TCG Software Stack) via libraries like `tpm2-tss` or Go's `go-tpm` to generate non-exportable private keys in NVRAM. It must bind to TLS client libraries (OpenSSL engine/provider, Rustls, or Go `crypto.Signer`) to perform PKCS#11 or TPM-based digital signatures for the TLS handshake without ever exposing the private key to host user memory.
Discussion
1 comment analyzed.
Competitors
Other products that read as similar to this one — 35 launches clear the similarity bar, closest 8 shown.
Attention rank: #32 of 36 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 231 days after the earliest competitor.
- TLA PreCheck · hn · 2026-03-17 · 7 upvotes · similarity 0.44
- A/B testing LLM silence with one system-prompt toggle · hn · 2026-06-19 · 10 upvotes · similarity 0.42
- A local MitM proxy to control TLS fingerprints · hn · 2026-08-18 · 29 upvotes · similarity 0.40
- I hate typing continue once my CC quota resets · hn · 2026-06-14 · 5 upvotes · similarity 0.38
- llm-keys-ui · github · 2026-09-20 · 10 upvotes · similarity 0.38
- mneos · ph · 2026-09-13 · 1 upvotes · similarity 0.37
- Open security key on nrf52480 with NFC · hn · 2026-04-20 · 5 upvotes · similarity 0.36
- key-carousel · hn · 2026-03-06 · 5 upvotes · similarity 0.36
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.