I am a TrueCrypt fan with one caveat; we never use full-disk encryption
for our clients but rather create an encrypted file container which, when
mounted as a separate drive, becomes the repository for all data,
including but not limited to Outlook PSTs or Thunderbird profile and
mail files, Firefox profile & cache, mobile phone sync data and all
documents.

Still working on moving Skype and other IM data on to the encrypted
drive and using an on-screen keyboard program to enter the encrypted
drive's password to try to defeat key loggers.

Besides the vulnerability of full-disk encryption to monitors such as
Evil Maid, I have seen fully-encrypted disks presented to Windows, to
which the response is "Format Drive XX?". Too risky if laptop is abroad
and needs to be attended to by an ignorant technician.

--
Peter van Houten

On the 27 May, 2010 16:57, Jeff Brown wrote the following:
There was a post last week about HIPAA compliance and a small part of
that discussion there were a couple of encryption programs mentioned.  I
have bitlocker running on the OS's that happen to come with it, and need
something for those that don't.  Might consider OS upgrade if the
encryption piece is too costly.

anyone using something they LOVE?  any chance there is a program that
will report encryption status back to a management station?

tiafah.

Jeff

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to