<?xml version='1.0' encoding='utf-8'?>
<?xml-stylesheet href="/style/browser.xsl" type="text/xsl"?>
<essay xmlns="http://docbook.org/ns/docbook"
       xmlns:xlink="http://www.w3.org/1999/xlink"
       xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'
       xmlns:dc='http://purl.org/dc/elements/1.1/'
       xmlns:dcterms="http://purl.org/dc/terms/"
       xmlns:gal='http://norman.walsh.name/rdf/gallery#'
       xmlns:foaf="http://xmlns.com/foaf/0.1/"
       xml:lang="en"
       version='5.0'>
<info>
<title>Encryption lossage</title>
<volumenum>10</volumenum>
<issuenum>138</issuenum>
<pubdate>2007-12-07T12:46:49-05:00</pubdate>
<date>$Date$</date>
<author><personname>
<firstname>Norman</firstname><surname>Walsh</surname>
</personname></author>
<copyright><year>2007</year><holder>Norman Walsh</holder></copyright>
<abstract>
<para>Encrypting some stuff seems like a good idea. Mail, for example.
If you stole my laptop, you wouldn't find anything interesting in the
142,113 email messages therein, but I'd rather you didn't get to look.
Just on principle. [Updated.]
</para>
</abstract>
</info>

<para xml:id='p1'>On Linux, I had a couple of encrypted partitions
(<filename>/home</filename> and <filename>/Mail</filename>). It caused
a little heartburn across major upgrades, but it never failed to work
and it never lost any data.</para>

<para xml:id='p2'>On the Mac, I think <wikipedia>FileVault</wikipedia> offers the
same sort of functionality, but it doesn't seem to have a very good
reputation. A very small amount of poking about on the net will find
users with
<link xlink:href="http://www.tbray.org/ongoing/When/200x/2007/11/21/Leopard-Ouch">horror
stories</link>.</para>

<para xml:id='p3'>But the Mac can also make these
<link xlink:href="http://docs.info.apple.com/article.html?artnum=107333">encrypted, sparse disk images</link>. So I created a 4Gb one, copied all my mail to it,
reconfigured <wikipedia>Gnus</wikipedia> to use the new location, and all
seemed well.</para>

<para xml:id='p4'>Then my Mac crashed. Game over. Power cycle, please.</para>

<para xml:id='p5'>When it came back, a not large, but non-trivial hunk of my
mail archive was corrupted. Not only did it take a while to get things
back into a state where Gnus would even show me the mail, after it
would, it became clear that some tens of messages in some tens of
folders are now random encrypted junk.</para>

<para xml:id='p6'>There are a few ways to recover from my mail backups, but none of
them are pretty. I might just assume those missing messages weren't important.
And I might go back to storing my mail without encryption.</para>

<para xml:id='p7'>Right now, I'm probably too mad to make a rational decision.</para>

<para xml:id='p8'>[Update: …several hours pass… I just couldn't stand it. I had to 
go back and recover from my backups. What a
<link xlink:href="http://en.wiktionary.org/wiki/PITA">PITA</link>.
I may have lost some
of my replies, but that's the best I can do, I think. Now I just have to
delete all the spam again. And I'm <emphasis>not</emphasis> encrypting
my mail anymore, at least not this afternoon. What's left of it.]</para>

</essay>
