[OpenAFS] Encryption in OpenAFS

Derrick J Brashear shadow@dementia.org
Thu, 21 Feb 2002 09:15:44 -0500 (EST)


On Thu, 21 Feb 2002, Ted Anderson wrote:

> > > If you would like to encrypt everything, do an "fs setcrypt on".
> > 
> > However, this will *not* encrypt client cache contents, which may or
> > may not be a problem for you (it certainly is a problem for us).
> 
> This is interesting.  Your users don't trust the client to protect the
> data?  Or are you worried about the client's disks being exposed during
> service calls or sold after a hardware upgrade?

The latter can be solved by using a memory-based cache.
The former can be solved by giving everyone her own machine.

-D