Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #196082

Re: Possible for full-disk encryption to encrypt /boot as well?

From Abdullah Ramazanoğlu <ar018@yahoo.com>
Newsgroups linux.debian.user
Subject Re: Possible for full-disk encryption to encrypt /boot as well?
Date 2018-05-26 03:20 +0200
Message-ID <vTw2e-59f-3@gated-at.bofh.it> (permalink)
References <vTq6t-1wc-1@gated-at.bofh.it> <vTqSS-21j-7@gated-at.bofh.it> <vTvpv-4HK-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Fri, 25 May 2018 17:33:54 -0700 Robert Dodier said:

> It may be true that encrypted /boot is not really relevant, but I
> don't want to try to argue with tech support staff that a system with
> unencrypted /boot is close enough. I feel like it needs to be all or
> nothing in order for me to press this issue with them.

Or you can offer them a setup more than full-disk encryption: Put the
(unencrypted) /boot on a USB stick, and the rest of the system on fully
encrypted disk.

* With full disk encryption (Linux or Windows) all one needs is the pass-phrase.
* With /boot on USB stick, one needs both the key (the stick) and the
  pass-phrase.

At any rate, it is technically "full disk encryption" - there's nothing
unencrypted on hard drive, is there? :)

Regards
-- 
Abdullah Ramazanoğlu

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-25 21:00 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-05-25 21:50 +0200
    Re: Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-26 02:40 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? Abdullah Ramazanoğlu <ar018@yahoo.com> - 2018-05-26 03:20 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? Pascal Hambourg <pascal@plouf.fr.eu.org> - 2018-05-26 10:20 +0200
        Re: Possible for full-disk encryption to encrypt /boot as well? Robert Dodier <robert.dodier@gmail.com> - 2018-05-26 18:00 +0200
          Re: Possible for full-disk encryption to encrypt /boot as well? Curt <curty@free.fr> - 2018-05-26 19:00 +0200
            Re: Possible for full-disk encryption to encrypt /boot as well? David Wright <deblis@lionunicorn.co.uk> - 2018-05-26 21:10 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? Celejar <celejar@gmail.com> - 2018-05-25 22:00 +0200
  Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 02:30 +0200
    Re: Possible for full-disk encryption to encrypt /boot as well? Paul Johnson <baloo@ursamundi.org> - 2018-05-27 06:20 +0200
      Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 07:50 +0200
        Re: Possible for full-disk encryption to encrypt /boot as well? Paul Johnson <baloo@ursamundi.org> - 2018-05-27 08:50 +0200
          Re: Possible for full-disk encryption to encrypt /boot as well? David Christensen <dpchrist@holgerdanske.com> - 2018-05-27 19:40 +0200

csiph-web