> What's the point of using a TPM to decrypt your disk automatically?
It's moving the slider towards the "ease of use" end of the "security - ease of use" spectrum. It essentially outsources security to the Windows OS logon, at which point a whole bunch has started up in the background and the attack surface has substantially increased.
It's moving the slider towards the "ease of use" end of the "security - ease of use" spectrum. It essentially outsources security to the Windows OS logon, at which point a whole bunch has started up in the background and the attack surface has substantially increased.
But it saves having to type in a second password.