Hacker News new | past | comments | ask | show | jobs | submit login

Pedantic, but important: there's no such thing as a "block filesystem". There is encryption performed at the level of a filesystem, and encryption performed at the level of a hardware device (schemes like Truecrypt are, in fact, simulating hardware disk encryption).

It's a little ironic that encrypted filesystem implementations on Linux are so bad, because the filesystem is a much better layer at which to perform encryption than the device itself.




This is true. I was pointing out that eCryptfs is reading files off of another filesystem, and presenting the decrypted versions of the files as another filesystem vs. something else that can read directly from a block device.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: