Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-27 Thread David Christensen
On 05/26/18 23:40, Paul Johnson wrote: On Sun, May 27, 2018 at 12:43 AM, David Christensen < dpchr...@holgerdanske.com> wrote: On 05/26/18 21:16, Paul Johnson wrote: On Sat, May 26, 2018 at 7:21 PM, David Christensen Have you considered a self-encrypting drive ... I'm 99.99% sure (like D

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread Paul Johnson
On Sun, May 27, 2018 at 12:43 AM, David Christensen < dpchr...@holgerdanske.com> wrote: > On 05/26/18 21:16, Paul Johnson wrote: > >> On Sat, May 26, 2018 at 7:21 PM, David Christensen >> >>> Have you considered a self-encrypting drive ... >>> >> >> I'm 99.99% sure (like Dove soap sure) that Syman

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread David Christensen
On 05/26/18 21:16, Paul Johnson wrote: On Sat, May 26, 2018 at 7:21 PM, David Christensen Have you considered a self-encrypting drive ... I'm 99.99% sure (like Dove soap sure) that Symantec full disk encryption doesn't work this way because I'm just as sure that none of the Dell models I've ev

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread Paul Johnson
On Sat, May 26, 2018 at 7:21 PM, David Christensen < dpchr...@holgerdanske.com> wrote: > On 05/25/18 11:55, Robert Dodier wrote: > >> I'm working with Debian 9. I gather that there is a full-disk >> encryption option for the standard Debian installer, which, as I >> understand it, does not include

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread David Christensen
On 05/25/18 11:55, Robert Dodier wrote: I'm working with Debian 9. I gather that there is a full-disk encryption option for the standard Debian installer, which, as I understand it, does not include encrypting /boot. ... On 05/25/18 17:33, Robert Dodier wrote: > I am working for an organization

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread David Wright
On Sat 26 May 2018 at 16:51:56 (+), Curt wrote: > On 2018-05-26, Robert Dodier wrote: > > On Sat, May 26, 2018 at 1:16 AM, Pascal Hambourg > > wrote: > > > >> I don't know how Symantec's "full" disk encryption works, but AFAIK a boot > >> disk cannot be fully encrypted, > > > > Yes, this is

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread Curt
On 2018-05-26, Robert Dodier wrote: > On Sat, May 26, 2018 at 1:16 AM, Pascal Hambourg > wrote: > >> I don't know how Symantec's "full" disk encryption works, but AFAIK a boot >> disk cannot be fully encrypted, > > Yes, this is an important question -- what, exactly, is provided by > Symantec he

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread Robert Dodier
On Sat, May 26, 2018 at 1:16 AM, Pascal Hambourg wrote: > I don't know how Symantec's "full" disk encryption works, but AFAIK a boot > disk cannot be fully encrypted, Yes, this is an important question -- what, exactly, is provided by Symantec here, so that I can look for something to do the sam

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-26 Thread Pascal Hambourg
Le 26/05/2018 à 02:33, Robert Dodier a écrit : On Fri, May 25, 2018 at 12:44 PM, Pascal Hambourg wrote: Why do you want an encrypted /boot ? It does not usually contain any sensitive information. Encrypted /boot is not tamper-proof unless extra steps are taken to protect the first stage boot s

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-25 Thread Robert Dodier
On Fri, May 25, 2018 at 12:44 PM, Pascal Hambourg wrote: > Why do you want an encrypted /boot ? It does not usually contain any > sensitive information. Encrypted /boot is not tamper-proof unless extra > steps are taken to protect the first stage boot such as booting from > write-protected, authe

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-25 Thread Celejar
On Fri, 25 May 2018 11:55:34 -0700 Robert Dodier wrote: > Hello, > > I'm working with Debian 9. I gather that there is a full-disk > encryption option for the standard Debian installer, which, as I > understand it, does not include encrypting /boot. (The system I'm > working on wasn't encrypted

Re: Possible for full-disk encryption to encrypt /boot as well?

2018-05-25 Thread Pascal Hambourg
Le 25/05/2018 à 20:55, Robert Dodier a écrit : I'm working with Debian 9. I gather that there is a full-disk encryption option for the standard Debian installer, which, as I understand it, does not include encrypting /boot. (The system I'm working on wasn't encrypted when it was installed, so th

Possible for full-disk encryption to encrypt /boot as well?

2018-05-25 Thread Robert Dodier
Hello, I'm working with Debian 9. I gather that there is a full-disk encryption option for the standard Debian installer, which, as I understand it, does not include encrypting /boot. (The system I'm working on wasn't encrypted when it was installed, so the system would have to be reinstalled, tha