Re:Self hosting is important
by nine_k on Saturday July 24, 2021 @11:16AM
(#27941624)
But typing in the key at boot / mount time is the only setup when disk encryption makes any sense at all.
[ Parent
| on HN ]
Full disk encryption with the key stored in a TPM or something makes sense as a way to enable a quick secure erase. If you clear the key from the TPM, the storage is useless; or if the storage gets removed for decommisioning, it's going to be hard to match it back up to the TPM, even if the TPM isn't cleared.