Re:From stolen laptop to inside the company network
by dkdk8283 on Wednesday July 28, 2021 @11:06PM
(#27992371)
> especially if a lockout policy is set on the TPM.
what happens at lockout?
Re:From stolen laptop to inside the company network
by tgsovlerkhgsel on Thursday July 29, 2021 @03:15AM
(#27993750)
Recovery with the escrow key held by IT, typically.
I agree that for the user who would pick a secure passphrase, it's comparable security either way and thus really comes down to preference. I like tapping a quick PIN on the numpad rather than typing out a passphrase, but I can definitely see the advantages to the passphrase approach: you don't have to depend on a piece of hardware specific to the machine, and the attack surface for a potential backdoor is a lot smaller, especially if you're using FOSS full disk encryption software like Veracrypt.