I worked at NASA in a past life. Whole-disk encryption was banned at our center because it caused "problems" for the IT contractors. If you had ITAR/SBU data, y

I worked at NASA in a past life. Whole-disk encryption was banned at our center because it caused "problems" for the IT contractors. If you had ITAR/SBU data, you were to encrypt and decrypt it manually using Entrust, which is the biggest pile of dogshit PKI I've ever seen. So of course people forgot, or got lazy. Another center was forced to keep using LEAP for years after it was broken, due to contract requirements. I am completely unsurprised by this. Saddened, but unsurprised.