2013/12/18 Kamil Paral <kparal@redhat.com>
> On Wed, Dec 11, 2013 at 10:33:34PM +0100, Micha³ Piotrowski wrote:
> > The beauty of ecryptfs is that I can encrypt one dir - not whole file
> > system.
>
> What's the concern with encrypting the whole filesystem?  It's better
> for you because you leave significant personal information all over
> the disk, eg in log files in /var/log, in /etc files.  Performance-
> wise it's not IMHO noticeable.

I use ecryptfs for Dropbox synchronization. I let it synchronize the encrypted folder and decrypt it on my clients. Very useful. A simple and convenient way how to synchronize private data.

There is another use case:
Michal wants to store backups of his backups on his fiancee hdd.
Ewelina uses her hdd in her work place so there is a possibility that someone can steal the data.
Michal can encrypt his data without encrypting the whole hdd so Ewelina can use it to her normal work.

Of course this can be done with gpg2, but ecryptfs is a lot easier to use.

It's OT here, but what are the reasons why RH drops support for ecryptfs? Ecryptfs seems to be more user friendly for encrypting data on btrfs than using dm-crypt on each drive. For example - you have a btrfs that uses 3 different hdd's - AFAIU you need to enter password for each hdd before mounting filesystem.
 
--
Best regards,
Michal

http://eventhorizon.pl/