[OpenAFS] Encryption in OpenAFS
Derrick J Brashear
shadow@dementia.org
Thu, 21 Feb 2002 09:15:44 -0500 (EST)
On Thu, 21 Feb 2002, Ted Anderson wrote:
> > > If you would like to encrypt everything, do an "fs setcrypt on".
> >
> > However, this will *not* encrypt client cache contents, which may or
> > may not be a problem for you (it certainly is a problem for us).
>
> This is interesting. Your users don't trust the client to protect the
> data? Or are you worried about the client's disks being exposed during
> service calls or sold after a hardware upgrade?
The latter can be solved by using a memory-based cache.
The former can be solved by giving everyone her own machine.
-D