3 ms·
but then couldn't people still get to your unencrypted data (through your backups)?
by paulhauggis 15y ago
but then couldn't people still get to your unencrypted data (through your backups)?
- culturestate 15y agoIf you're doing FDE, you should be encrypting your backups as well. It can be relatively trivial, depending on your backup setup.
- jodrellblank 15y agoThis is all good, until you get any kind of disk corruption. Good luck getting any of your data back.
- culturestate 15y agoIf my encrypted disk becomes corrupted and then corrupts my unencrypted backup, what's the difference?
- jodrellblank 15y agoA good backup, e.g. Time machine, lets you restore feom before the corruption. A backup on an encrypted disk risks the entire backup volume being corrupted and unusable in one go, thus making it a very brittle backup. I'm assuming that a corrupted encrypted file is totally unusable here, and now that I think more about it I'm not sure - encryption with chained blocks would mean errors have a larger affect than just at the error site, wouldn't it?
- mike-cardwell 15y agoI use FDE on my laptop. I recently wrote up how I handle encrypted backups: https://grepular.com/Secure_Free_Incremental_and_Instant_Backups_for_Linux https://grepular.com/Secure_Free_Incremental_and_Instant_Bac...