[Discuss] Full disk encryption and backups

[Tom Metro]

Richard Pieri wrote:
> om Metro wrote:
>> I'm not sure I see the big problem with backups, unless you simply
>> find file-level backups undesirable in general.
> 
> With WDE, you either decrypt-recrypt everything during backups which
> means that there is a point in the process where you have no
> security/privacy on the data...

Ummm...yeah. You do realize that in order to use your data you need to
decrypt it, right? :-)

You can make a case that decrypting and then re-encrypting data before
you send it off the machine to your backup service is inefficient, but
it isn't insecure.

 -Tom

-- 
Tom Metro
Venture Logic, Newton, MA, USA
"Enterprise solutions through open source."
Professional Profile: http://tmetro.venturelogic.com/