← Back to context Comment by dwaite 11 hours ago encrypted by both a boot password and a secure enclave held key 8 comments dwaite Reply Eueudhsbsj32 9 hours ago Are you suggesting that both keys should be required for decryption?How would you restore the backup if your secure hardware device is lost/stolen/damaged? vel0city 8 hours ago The backup would live someplace other than on the broken machine. It would be encrypted some other way (or maybe not at all, depending on threat profile).No point in encrypting those family photos burned to disc. pmontra 10 hours ago And the owners of the computer can't get the key in the secure enclave? Are they part of the threat model? rafram 10 hours ago “Some person with physical access to the computer” absolutely is part of the threat model. pmontra 9 hours ago Some person, yes. The owner, no. 3 replies →
Eueudhsbsj32 9 hours ago Are you suggesting that both keys should be required for decryption?How would you restore the backup if your secure hardware device is lost/stolen/damaged? vel0city 8 hours ago The backup would live someplace other than on the broken machine. It would be encrypted some other way (or maybe not at all, depending on threat profile).No point in encrypting those family photos burned to disc.
vel0city 8 hours ago The backup would live someplace other than on the broken machine. It would be encrypted some other way (or maybe not at all, depending on threat profile).No point in encrypting those family photos burned to disc.
pmontra 10 hours ago And the owners of the computer can't get the key in the secure enclave? Are they part of the threat model? rafram 10 hours ago “Some person with physical access to the computer” absolutely is part of the threat model. pmontra 9 hours ago Some person, yes. The owner, no. 3 replies →
rafram 10 hours ago “Some person with physical access to the computer” absolutely is part of the threat model. pmontra 9 hours ago Some person, yes. The owner, no. 3 replies →
Are you suggesting that both keys should be required for decryption?
How would you restore the backup if your secure hardware device is lost/stolen/damaged?
The backup would live someplace other than on the broken machine. It would be encrypted some other way (or maybe not at all, depending on threat profile).
No point in encrypting those family photos burned to disc.
And the owners of the computer can't get the key in the secure enclave? Are they part of the threat model?
“Some person with physical access to the computer” absolutely is part of the threat model.
Some person, yes. The owner, no.
3 replies →