34
Do you use TPM ? (lemmy.ml)
submitted 2 years ago by to c/privacy@lemmy.ml
13 comments fedilink hide all child comments
 

I honestly haven't found any good reading material other then the arch wiki which indeed vaguely outlines pros and cons, and I was wondering if the only significant advantage Is that you dont have go type your password in... Which ita a big advantage if you dont mind cold boot attacks ... Also automatic login Is handy if you dont mind privacy at all ... What do you think?

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 2 years ago

Together with secure boot and your own signing keys, it could be a good way to en/decrypt the a dm-verity secured read-only rootfs. But for the home partition I would probably still want to enter my own decryption key, maybe via systemd-homed. From there you can update the kernel/initramfs and read-only rootfs image and sign them for the next boot.

This is complicated to set up. Otherwise maybe use TPM as a 2FA, so you still have to enter a pin?

  • permalink
  • fedilink
  • source
    •