<html><head><base href="x-msg://24/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I'm trying to figure out how whole disk encryption is "desirable - mostly in terms of backups". How is that the case?<div><br></div><div>Is the issue key management? User data stored outside encrypted directories? Concerns about OS integrity? </div><div><br></div><div>For Windows users especially, often solutions are driven by the difficulty of balancing functionality in the system for deployment (including your PKI) vs. the complexity. We are all pretty familiar with the tools that educated end-users can use (those you outlined). But, the tools that provide more functionality and control are a magnitude more complex and expensive both to acquire and learn. For example, Microsoft's BitBlocker technology and the products from PGPs line (now, of course, owned by Symantec). Complexity also comes from integrating into Active Directory.</div><div><br></div><div>I'd be interested to understand what the real driver is here, in particular what the issues are with the (free) tools you mentioned. Can't understand how backups are part of this.</div><div><br></div><div>_KMP</div><div><br></div><div><div>On 21Aug10, at 13:08 , Edward Ned Harvey wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div lang="EN-US" link="blue" vlink="purple"><div class="WordSection1" style="page: WordSection1; "><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">Presently, I have Mac and Windows laptop users. The mac users use encrypted sparsebundles, and the windows users use TrueCrypt for encryption. There are a lot of reasons whole disk encryption would be desirable - mostly in terms of backups.<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">There are a lot of whole disk encryption solutions out there. I can simply stab into the dark and start trying them ... But I thought perhaps I could benefit from experiences that have been had already...<o:p></o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0.0001pt; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif; ">Anybody care to offer their experiences?<o:p></o:p></div></div>_______________________________________________<br>bblisa mailing list<br><a href="mailto:bblisa@bblisa.org" style="color: blue; text-decoration: underline; ">bblisa@bblisa.org</a><br><a href="http://www.bblisa.org/mailman/listinfo/bblisa" style="color: blue; text-decoration: underline; ">http://www.bblisa.org/mailman/listinfo/bblisa</a></div></span></blockquote></div><br><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: normal normal normal 11px/normal Helvetica; ">--</font></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: normal normal normal 11px/normal Helvetica; ">K. M. Peterson<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> <span class="Apple-converted-space"> </span></span>voice:<span class="Apple-converted-space"> <span class="Apple-converted-space"> </span></span>+1 617 731 6177</font></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: normal normal normal 11px/normal Helvetica; ">Boston, Massachusetts, USA<span class="Apple-converted-space"> </span><span class="Apple-converted-space"> <span class="Apple-converted-space"> </span></span>fax:<span class="Apple-converted-space"> <span class="Apple-converted-space"> </span></span>+1 206 338 6427</font></p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" style="font: normal normal normal 11px/normal Helvetica; "><span class="Apple-converted-space"> <span class="Apple-converted-space"> </span></span>Full contact information at <a href="http://kmpeterson.com/contact.html">http://kmpeterson.com/contact.html</a><span class="Apple-converted-space"> </span></font></p></div></span>
</div>
<br></body></html>