On 11/10/2006 7:12 AM, Paul Keating wrote:

> In my opinion, sending tapes off site with labels on them identifying, 
> or hinting, in any way shape or form, what the data is on those tapes is 
> a security risk.....
>  
> eliminating as much info from being stored with the tapes is security by 
> obscurity, if you will.
>  
> If a tape was lost while offsite, would you rather it be an obscure 
> barcode, or a label that says "Astrium HR-Finance"??

It doesn't matter if the tape is encrypted.  You're not shipping around 
unencrypted tapes are you?

We added a pair of Decru appliances earlier this year - they're sweet 
boxes and allow us to encrypt *everything*.  We no longer have the 
question if server x is encrypted whereas y isn't - we encrypt all of 
the data all of the time.

        .../Ed

-- 
Ed Wilts, Mounds View, MN, USA
mailto:ewilts at ewilts.org