3 ms·
Ending up being tech support for a lot of my family, I tend to agree with you. Microsoft is likely holding the keys to be able de-escalte users who forget thei
by jmount 11y ago
Ending up being tech support for a lot of my family, I tend to agree with you. Microsoft is likely holding the keys to be able de-escalte users who forget their key. I doubt many home users understand that encryption keys are not like online account passwords (you can't reset them).
Since Microsoft presumably doesn't have the data, they get little value from holding the key. However, I would never copy a key without telling anyone.
- Jedd 11y agoAbout a year ago I had to re-enter the world of MS desktop OS's for commercial use. Given a need to dual-boot (GNU/Linux & Windows 7) I looked at the handful of options that existed for on-disk encryption that was palatable to both, and settled on VeraCrypt (one of the TrueCrypt forks). Biggest surprise was the inflexibility with key management. What you say here -- encryption keys are not like online account passwords (you can't reset them) -- is NOT the default for people coming from dmcrypt[1], for example, where I can have multiple pass phrases / files to the same vault, easily adding and removing them. It feels odd to work with at rest encryptions systems, and I'm guessing Win10 has the same constraint out of the box?, that don't offer this feature. [1] https://wiki.archlinux.org/index.php/Dm-crypt/Device_encryption https://wiki.archlinux.org/index.php/Dm-crypt/Device_encrypt...
- geographomics 11y agoYou can add multiple protection methods with BitLocker: https://technet.microsoft.com/en-gb/library/ff829848.aspx https://technet.microsoft.com/en-gb/library/ff829848.aspx This is also how they implement recovery passwords (as 'numerical passwords') by default.