[OpenAFS] Encryption in OpenAFS

[Neulinger, Nathan]

If you are dual booting to windows w/ untrusted users during the day, =
you have a LOT worse potential security problems than someone looking =
over the contents of the cache.=20

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@umr.edu
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: KELEMEN Peter [mailto:fuji@elte.hu]=20
> Sent: Thursday, February 21, 2002 8:35 AM
> To: openafs-info@openafs.org
> Subject: Re: [OpenAFS] Encryption in OpenAFS
>=20
>=20
> * Ted Anderson (ota@transarc.com) [20020221 09:14]:
>=20
> Ted,
>=20
> > This is interesting.  Your users don't trust the client to
> > protect the data?  Or are you worried about the client's disks
> > being exposed during service calls or sold after a hardware
> > upgrade?
>=20
> The machines are working in two-phase shifts: during the day they
> are public access student workstations at the university (running
> whatever W*ndows version), during the night they are members of a
> Linux cluster.  Management is concerned about AFS cache contents
> potentially exposed to unauthorized eyes during daytime (we have
> international collaborators).  Current workaround is scheduled
> shutdown before daytime shift starts that includes cache-wiping.
>=20
> Peter
>=20
> --=20
>     .+'''+.         .+'''+.         .+'''+.         .+'''+.  =20
>       .+''
>  Kelemen P=E9ter     /       \       /       \       /      =
fuji@elte.hu
> .+'         `+...+'         `+...+'         `+...+'         `+...+'
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>=20