From owner-freebsd-current@freebsd.org  Tue Oct 20 05:25:30 2015
Return-Path: <owner-freebsd-current@freebsd.org>
Delivered-To: freebsd-current@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id C3D04A183AF
 for <freebsd-current@mailman.ysv.freebsd.org>;
 Tue, 20 Oct 2015 05:25:30 +0000 (UTC)
 (envelope-from phk@phk.freebsd.dk)
Received: from phk.freebsd.dk (phk.freebsd.dk [130.225.244.222])
 by mx1.freebsd.org (Postfix) with ESMTP id 8C457C8B
 for <freebsd-current@freebsd.org>; Tue, 20 Oct 2015 05:25:30 +0000 (UTC)
 (envelope-from phk@phk.freebsd.dk)
Received: from critter.freebsd.dk (unknown [192.168.55.3])
 by phk.freebsd.dk (Postfix) with ESMTP id B19AB4F860;
 Tue, 20 Oct 2015 05:25:28 +0000 (UTC)
Received: from critter.freebsd.dk (localhost [127.0.0.1])
 by critter.freebsd.dk (8.15.2/8.15.2) with ESMTP id t9K5PRwE095400;
 Tue, 20 Oct 2015 05:25:27 GMT (envelope-from phk@phk.freebsd.dk)
To: RW <rwmaillists@googlemail.com>
cc: freebsd-current@freebsd.org
Subject: Re: Depreciate and remove gbde
In-reply-to: <20151019234855.4ed82051@gumby.homeunix.com>
From: "Poul-Henning Kamp" <phk@phk.freebsd.dk>
References: <56237623.5010702@fizk.net>
 <201510182329.t9INTarc018248@fire.js.berklix.net>
 <20151019061930.461285f8@freyja.zeit4.iv.bundesimmobilien.de>
 <20151019234855.4ed82051@gumby.homeunix.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <95398.1445318727.1@critter.freebsd.dk>
Date: Tue, 20 Oct 2015 05:25:27 +0000
Message-ID: <95399.1445318727@critter.freebsd.dk>
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current/>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Oct 2015 05:25:30 -0000

--------
In message <20151019234855.4ed82051@gumby.homeunix.com>, RW writes:

>I certainly wouldn't like to see gbde removed but I think it is
>unfortunate that it's given slightly greater prominence in the handbook
>than geli. geli is the right choice for most people.

This I fully agree with.

GELI is fine if your threatmodel is a stolen laptop.

GBDE is for when the user is in danger.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.