Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 27 Jan 2002 15:13:07 +0200
From:      "peeter kallas" <peeter.kallas.002@mail.ee>
To:        "Anthony Atkielski" <anthony@atkielski.com>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Vastan: Cryptographic file systems
Message-ID:  <200201271313.g0RDD7O32639@june.tele2.ee>

next in thread | raw e-mail | index | archive | help
> As long as anyone has physical access to the box, there is no solution
> to
> the problem you describe.  Anyone with access to the server also has
> access
> to its network connections, and could thus intercept network traffic
> involving encrypted files.  Encrypting them on disk is thus pointless.

Thing is that only way to gain access to that box is to physically break into the office, grab the box can run before security guards arrive, so storing info in encrypted form is quite adequate for the situration.

Of course it would be better if encryption is done on the client side and theoretically it could be transparent too -- for example NFS client for Windows that crypts the file data (anybody heard of such?)

-- everyday.com --
Tasuta e-post, SMS-id ja aadressiraamat.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200201271313.g0RDD7O32639>