On 30 December 2015 at 21:47, Bruce Dubbs <bruce.du...@gmail.com> wrote: > There is always a tradeoff between security and convenience. How much > inconvenience you will but up with depends on the value of the data on your > system. You have to decide the value for yourself.
From experience, the only inconvenience I've encountered is maintaining strong (impossible to remember) passwords, but I believe it is worth the small extra effort. Full disk encryption, once set up, is of no inconvenience. The encrypted laptop appears to boot in about the same time as a non-encrypted model; the encrypted layer is unnoticeable. Of course, if you lose the keyfile then you have a real problem, but, as always, the answer is backups. BTW I don't use LUKS. I don't have an encrypted /boot either. As /boot is on a USB flash drive it is with me permanently (hopefully), and the two only come together when I insert it into the USB port on the laptop. Once booted, the flash drive can be returned to my pocket. Richard -- http://lists.linuxfromscratch.org/listinfo/lfs-support FAQ: http://www.linuxfromscratch.org/blfs/faq.html Unsubscribe: See the above information page Do not top post on this list. A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing in e-mail? http://en.wikipedia.org/wiki/Posting_style