Lennart Poettering on Nostr: …where user data is at best encrypted with a per-system/admin encryption key, and ...

…where user data is at best encrypted with a per-system/admin encryption key, and access control to user accounts is just something that protects the ability to log in, but not the user's data.

In continuation of this security focused theme, user records managed by systemd-homed are cryptographically signed: only accounts properly signed by a system-owned key pair can actually log into a specific system.

That means two things: first of all the user's data is protected by the user's…