Secure unattended decryption

Grant Olson kgo at grant-olson.net
Thu Mar 18 16:37:40 CET 2010


On 3/18/2010 7:50 AM, Daniel Eggleston wrote:
> ..., with the ultimate goal
> that if somebody does somehow walk out with the storage containing the
> databases, there will be no way to gain access to the data.

Physically walk out?  You could use some full disk encryption instead.
And a lock on the server room door helps.  ;-) Hypothetically?  Like
someone hacking ssh or nfs or something?  Like you said, it's a bit of a
contradiction.  Now someone can just hack the nodes.  (Or even the
clients that are accessing the nodes.  But they could probably do that now.)

How specifically do you imagine someone stealing the data?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 552 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20100318/23826559/attachment.pgp>


More information about the Gnupg-users mailing list