more on fde

This commit is contained in:
Randy Bush 2017-12-06 14:08:52 -08:00
parent 43d03c2e6b
commit 5595a85d21
No known key found for this signature in database
GPG key ID: D5597695EA37E360
2 changed files with 6 additions and 3 deletions

View file

@ -81,7 +81,10 @@ servers, AWS, or Google.
Use [Full Disk Encryption](https://support.apple.com/en-us/HT204837)
(for Windows it is BitLocker). You will not see a performance
difference. Be sure to save the encryption backup keys; perhaps a
company security officer.
company security officer. If you are a serious iCloud user, letting
Apple remember your FDE backup key for you is not unreasonable. Apple
does try to be good about your security if a court order is not in your
threat model.
## Screen Lock
@ -164,4 +167,4 @@ notification procedures,
---
2017.10.19
2017.12.06

View file

@ -227,7 +227,7 @@ be `python`
Now the barrage of ansible, which for me is based on my Mac laptop.
ansible-playbook -l random.sea.rg.net chrony.yml no-depends.yml snmpd.yml syslog-ng.yml unattended-upgrades.yml unbound.yml
ansible-playbook -l random.sea.rg.net no-depends.yml snmpd.yml syslog-ng.yml unattended-upgrades.yml unbound.yml chrony.yml
## Add the VM to Infrastructure Monitoring Etc.