4 ms·
Doesn't Windows have an option to have Microsoft keep a key in escrow? Seems like a reasonable compromise for most people.
by eli 9y ago
Doesn't Windows have an option to have Microsoft keep a key in escrow? Seems like a reasonable compromise for most people.
- eat_veggies 9y agoYes, you can attach your Bitlocker recovery keys to your Microsoft account. I trust them well enough, since my threat model doesn't include state actors or MS themselves--if they really wanted my data, they could just ship an update to my machine while everything's decrypted anyway.
- fowl2 9y agoFileVault has this option too, at least on the Mac Mini I have.
- cbhl 9y agoI can't imagine Apple offering this option -- it doesn't really align with their strengths (privacy first) and weaknesses (data centers). They'd need to fix so much of iCloud first.
- kalleboo 9y agohttps://support.apple.com/en-us/HT204837 https://support.apple.com/en-us/HT204837 > If you're using OS X Yosemite or later, you can choose to use your iCloud account to unlock your disk and reset your password > If you're using OS X Mavericks, you can choose to store a FileVault recovery key with Apple by providing the questions and answers to three security questions. Choose answers that you're sure to remember > If you don't want to use iCloud FileVault recovery, you can create a local recovery key. Keep the letters and numbers of the key somewhere safe—other than on your encrypted startup disk