Encryption options and suggestions or installed Dapper

Andrew Mathenge mathenge at gmail.com
Mon Dec 10 16:43:57 UTC 2007


Well said Ralph.

Andrew.

On Dec 9, 2007 11:15 PM, Robert Brockway <robert at timetraveller.org> wrote:

> On Fri, 7 Dec 2007, Ralph Pichie wrote:
>
> > I have an updated installation of Dapper on an Acer notebook that I
> > occasionally use for contract work. I want to encrypt at least part of
> > the data on it, and likely also a couple of USB thumb drives, possibly
> > an ext3 partition on an external hard drive as well. Note: I am NOT
> > interested in doing a fresh install at this time.
> >
> > What have the experiences been with encryption? Any recommendations?
>
> Hi Ralph.  I hear a lot of people express an interest in encrypting data
> these days.  Please consider the ramifications.  I believe a lot of people
> are using encryption without really understanding the potential problems.
>
> If you lose the private key or forget the passphrase the data on that
> device is unrecoverable.  For safety you'll want to engage in "key
> escrow", which means finding a secure location for the private key.  If
> the private key is kept in a location which is not particularly secure
> then neither is your encryption.
>
> If you have backups of the data will you encrypt those?  If you encrypt
> the main data source and the backups and lose the private key the data is
> gone (maybe someone can recover it in 80 or 100 years).  If you don't
> encrypt the backups then you'll want a very secure location to hold them.
> The data is only as secure as the least secure copy.
>
> Cheers,
>
> Rob
>
> --
> "With sufficient thrust, pigs fly just fine..."
>        -- RFC 1925 "The Twelve Networking Truths"
>
> --
> ubuntu-ca mailing list
> ubuntu-ca at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-ca
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-ca/attachments/20071210/e5b328e4/attachment.html>


More information about the ubuntu-ca mailing list