Re:“I would like to maintain the floppy driver”
by tptacek on Friday August 02, 2019 @06:38PM
(#20597238)
It depends on what your biggest concern is. Large scale metadata analysis is a concern that block-level encryption does a better job of than "file filter encryption" does. Authenticated encryption, which prevents people from bitflipping your init scripts into bindshells if you lose access to your laptop for a few minutes, is something that file encryption addresses and block encryption basically doesn't.
The important thing is that you don't really have to choose; a true encrypted filesystem can give you both things. Block-level encryption can't.
The important thing is that you don't really have to choose; a true encrypted filesystem can give you both things. Block-level encryption can't.