Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 Aug 2014 11:48:57 -0500
From:      Adam Vande More <amvandemore@gmail.com>
To:        "Julian H. Stacey" <jhs@berklix.com>
Cc:        FreeBSD Questions <questions@freebsd.org>, tyler@tysdomain.com
Subject:   Re: best solution for encrypting a mountpoint?
Message-ID:  <CA%2BtpaK1TRFBBGsw4KZnfjaOp%2B1wVg97y0r5wjrcJJqpCOcF6Sg@mail.gmail.com>
In-Reply-To: <201408311611.s7VGBVP9050225@fire.js.berklix.net>
References:  <540341C8.2040003@tysdomain.com> <201408311611.s7VGBVP9050225@fire.js.berklix.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Aug 31, 2014 at 11:11 AM, Julian H. Stacey <jhs@berklix.com> wrote:
>
> FreeBSD supports 2 encrypting file systems,


This isn't technically correct on a couple levels.  First, gbde and geli
encrypt block devices.  FS's may live on such a block device and then be
encrypted, but then again so could swap.  FreeBSD also supports
http://wiki.freebsd.org/PEFS through the ports system and this is actually
an encrypted filesystem.

Additionally I prefer geli over gbde since it supports a wider variety of
feature and is perhaps more secure.  See the corresponding handbook and man
pages for details.

-- 
Adam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2BtpaK1TRFBBGsw4KZnfjaOp%2B1wVg97y0r5wjrcJJqpCOcF6Sg>