60
Notes on full disk encryption on a Hetzner cloud VPS (lemmy.world)
submitted 8 months ago by to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 8 months ago (2 children)

It's worth going through the provider's policies.

For example, here's how Hetzner handles deletion of your data

Encryption will prevent mistakes, but if you can't trust the provider's policies you shouldn't trust them to run your infrastructure at all.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 9 points 8 months ago (1 child)

    Security is always applied in layers. The more the better. There's a reason "encryption at rest" is a requirement in many audits.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 5 points 8 months ago

    Agreed. I was going to argue more against encryption, but you can see me somewhat changing my mind in the second half of my comment.

    For me personally, I don't want the hassle of encryption on my VPS and have decided I'm fine with the remaining risk.

  • permalink
  • fedilink
  • source
  • parent