On 29.06.2013 22:23, Bill Davidsen wrote:
Leaving the card in the machine kind of defeats the purpose,
doesn't it?
And adds to the possibility of forgetting to remove the card when you
walk away. Security and convenience are to some extent mutually
exclusive.
Every security mechanism has it's disadvantages. I only said user has
choice between inserting SD card and entering passphrase every time
system boots. I prefer to insert/remove SD card - it's faster and I
don't have to waste my time waiting for password prompt.
BTW, after you unlock encrypted volumes either way, your system is
completely open and vulnerable as if you haven't used and disk
encryption. So, does it really make a difference how you unlocked your
machine?
Mateusz Marzantowicz