Quote:
Originally Posted by Frogm4n
I'd bet dollars to donuts that they mean the whole flash or partition is encrypted, not individual files. It's one of the loopholes of compliance checkboxes. I've got servers that are encrypted at rest (powered off or pre-boot), but upon boot up the filesystem is unlocked and everything is accessible.
|
At this point that seems likely. Possibly using an SSD with hardware encryption for battery conservation and speed.