3 ms·
I mean, is that not like saying that a user will RTFM and disable all unnecessary services after their install? The OpenBSD mentality is the opposite - they wi
by YPPH 4y ago
I mean, is that not like saying that a user will RTFM and disable all unnecessary services after their install?
The OpenBSD mentality is the opposite - they will sacrifice convenience and disable all unnecessary services by default, in order to make the system as secure as possible, and you can go RTFM and knowingly increase your risk if you choose to.
That mentality would suggest, I think, disk encryption should be opt-out on the install. Of course, the first step to getting there is an opt-in system.
- quesera 4y agoIt is, yes. It definitely works both ways. In this case (disk encryption) the process is simple, but the data collection and then things like back/fwd, changes, accept etc.. makes it more complicated than a simple boolean/checkbox. So the compromise was "bounce to the docs for this one", until this new improvement was added.