> http://www.whitehouse.gov/omb/memoranda/fy2006/m06-16.pdf > FDE might be one (cumbersome) way to do that, but it's certainly not the > only way.
FDE cumbersome??? I have never found FDE to be cumbersome, and I have been using FDE products for a long time. Can you please elaborate why you think FDE solutions are cumbersome? In my opinion, both FDE and file/folder level encryption (including encrypted vaults) have their place in the market. Full Disc Encryption does NOT replace file / directory level encryption. This is a because once the FDE drive boots up, all the data is available in a decrypted format. So if a hacker is able to connect to laptop over network while it is turned on, Full Disc Encryption will not help. However if the individual files are encrypted, the attempt to steal data over network by the hacker may be averted. One major benefit of FDE is that the decision to encrypt which files and leave which files decrypted is not left up to the users. Everything is encrypted by default. Thus it is "user proof". _______________________________________________ FDE mailing list [email protected] http://www.xml-dev.com/mailman/listinfo/fde
