Re: disk data protection

[Dimitri Georganas <dg_(_at_)_mitc_(_dot_)_net>]

Otto Moerbeek wrote:

> > Remote password storage (on a radius i.e.)  may defeat the whole purpose of
> > encrypted file systems (why?)
> > but as for now it seems the only answer to the question.
> >    
>
> Retrieving a password via a encrypted, authenticated channel is not what 
> you described. You descibed a simple password retrieval system based on 
> some machine characteristics. No crypto involved, and so easy to sniff and 
> replay.
>
> 	
>  
The absence of an explicit reference to a secure layer while mentioning 
a way to identify the system hardware
and fetch the password from a remote server doesn't necessarily mean I'm 
not going to secure the channel in whatever way,
but next time I'll make sure I mention it :-)