On 30 December 2015 at 21:47, Bruce Dubbs <bruce.du...@gmail.com> wrote:
> There is always a tradeoff between security and convenience.  How much
> inconvenience you will but up with depends on the value of the data on your
> system.  You have to decide the value for yourself.

From experience, the only inconvenience I've encountered is
maintaining strong (impossible to remember) passwords, but I believe
it is worth the small extra effort.  Full disk encryption, once set
up, is of no inconvenience.  The encrypted laptop appears to boot in
about the same time as a non-encrypted model; the encrypted layer is
unnoticeable.  Of course, if you lose the keyfile then you have a real
problem, but, as always, the answer is backups.  BTW I don't use LUKS.
I don't have an encrypted /boot either.  As /boot is on a USB flash
drive it is with me permanently (hopefully), and the two only come
together when I insert it into the USB port on the laptop.  Once
booted, the flash drive can be returned to my pocket.

Richard
-- 
http://lists.linuxfromscratch.org/listinfo/lfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Do not top post on this list.

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

http://en.wikipedia.org/wiki/Posting_style

Reply via email to