Tighten up on your backups. I've been running encrypted partitions (and full disk encryption) for years, and I haven't had a disk problem. Had plenty of other problems (just had a motherboard go bad), and I'm glad I had the backups.
-- Steven Rosenberg http://stevenrosenberg.net/blog http://blogs.dailynews.com/click stevenhrosenb...@gmail.com ste...@stevenrosenberg.net On Thu, May 2, 2013 at 12:19 AM, tv.deb...@googlemail.com < tv.deb...@googlemail.com> wrote: > On 05/01/13 06:23, T o n g wrote: >> My understanding/impression is that with Full Disk Encryption, even a >> single bad sector will have a much larger impact than itself and might >> ruin the whole disk. >> ... >> So, what would you plan for normal home users on disk failure for Disk >> Encryption? How to cope with it? >> > > > Hi, I guess what you are referring to can happen if you get bad sectors > where the luks header resides. This is a single point of failure in luks > whole disk encryption, to plan for this you must have current backups (but > most likely on another encrypted media, so there is always a tiny > probability that this is going to happen there too), and backup the luks > headers (see command "cryptsetup luksHeaderBackup"). See cryptsetup man for > security good practice regarding the headers backups. > > > > -- > To UNSUBSCRIBE, email to > debian-user-REQUEST@lists.**debian.org<debian-user-requ...@lists.debian.org>with > a subject of "unsubscribe". Trouble? Contact > listmas...@lists.debian.org > Archive: > http://lists.debian.org/**51821384.7000809@googlemail.**com<http://lists.debian.org/51821384.7000...@googlemail.com> > >