RE: PCI, EFS and the future?

["Nick Vaernhoej" <nick.vaernhoej () capitalcardservices com>]

Sagib

Because people and articles are full of reasons why EFS might not be a
good idea. But there is very little that says black on white, Yes or no.

In my own research I experience a 25% overhead when used on a fresh
install of Windows Server 2003 and Windows XP

> From the following article
http://datasecurity.wordpress.com/2006/08/09/methods-of-encrypting-data/

" There is no current consensus but companies wishing to leverage such a
system will face an up-hill battle to defend the proper key management
processes in place."

Nick Vaernhoej
"Quidquid latine dictum sit, altum sonatur."

<---snip--->
May I ask why you feel that EFS is the wrong solution? On the face, it
seems to satisfy all the PCI data storage encryption requirements ....

I will tell you more why EFS might not be a good idea, but I want to
hear your opinion first.

saqib
http://www.full-disk-encryption.net