4 ms·

So do you not use FDE? I'd think that to protect data at rest, especially on a laptop, it's good practice to power down whenever you're away. Otherwise keys are

So do you not use FDE? I'd think that to protect data at rest, especially on a laptop, it's good practice to power down whenever you're away. Otherwise keys are just sitting there in memory.

michaelmrose 8y ago
It's actually possible to suspend io to the encrypted data and remove the keys from ram and prompt for the passphrase at resume to unlock. Check out go-luks-suspend