3 ms·
Doesn't this defeat the purpose (at least partially?) I assume law enforcement can request those keys from Microsoft if they're backed up to the account.
by tiagod 5y ago
Doesn't this defeat the purpose (at least partially?)
I assume law enforcement can request those keys from Microsoft if they're backed up to the account.
- ptk 5y agoI think the threat models of the overwhelming majority of individuals would prioritize scenarios that involve lost or stolen laptops/desktops over law enforcement. So Microsoft defaulting to protecting the security needs of the common man over criminals seems entirely reasonable to me. Criminals (or the security/privacy conscious) can organize their enterprises to make sure that their BitLocker keys aren’t stored where law enforcement agencies can get them. And I say that as someone who really does have concerns about the possibility that this can be abused, but I still believe it’s a reasonable default.