On Wed, Nov 16, 2016 at 10:23:39AM -0500, Jiri B wrote: > On Wed, Nov 16, 2016 at 09:14:51AM -0600, Ax0n wrote: > > I just purchased a SanDisk SSD for my daily-driver laptop which has been > > running -CURRENT well. I'm considering going with FDE and a fresh snapshot > > install, adding my packages then copying over what I need from my old > > spinning rust drive, mostly /home and the ssh host keys from /etc/ssh. > > > > Anything I should look out for? To be honest, this is my first experience > > installing anything onto an SSD so I'd be welcome to accept any pointers > > specific to OpenBSD. Searching misc@ for as long as I've been subscribed > > hasn't yielded any solid input on this. > > Not sure if encrypting swap makes still sense if you already have FDE. > What's recommended in this context? > > j. >
I always leave swap crypt enabled anyway. Less hassle, and one more layer for an attacker to poke through for finding leftover bits of data from RAM.
