11 ms·
TPM without PIN is the default configuration, so I'd consider it to be a big deal.
by NotPractical 3y ago
TPM without PIN is the default configuration, so I'd consider it to be a big deal.
- briHass 3y agoThe age old battle of security vs convenience. Most Linux distros don't force you into pre boot, PIN TPM encryption either. It is controllable through group policy, so orgs that care can force users into it.
- deleted 3y ago[deleted]
- ddtaylor 3y agoI agree. It seems Microsoft wants to get the accolades of solving a hard key exchange problem without actually solving that hard key exchange problem. We see this a LOT in companies that "make it easy" to do cryptography.