3 ms·
The biggest problem with Windows is de-facto key escrow. If you want to use BitLocker in W10, you have two options: 1. Escrow your FDE keys with Microsoft Liv
by daxorid 8y ago
The biggest problem with Windows is de-facto key escrow.
If you want to use BitLocker in W10, you have two options:
1. Escrow your FDE keys with Microsoft Live
2. Go through the hassle of setting up a PDC and escrowing them to your domain.
There is no option to NOT escrow your keys to a very LEO-cozy company with a local account. This is an immediate deal-killer, regardless of any other features or improvements.
- binarycrusader 8y agoThis does not work quite the way you’ve stated: https://articles.forensicfocus.com/2016/03/23/bitlocker-whats-new-in-windows-10-november-update-and-how-to-break-it/ https://articles.forensicfocus.com/2016/03/23/bitlocker-what... The short version is there are multiple levels of BitLocker functionality and what options are available is dependent upon hardware, group policies, and the Windows Edition installed.