From a7d8d59ac1eb23b538b9dc5d3dc0fa639663ac83 Mon Sep 17 00:00:00 2001
From: Francis Rowe <info@gluglug.org.uk>
Date: Thu, 11 Sep 2014 00:26:50 -0400
Subject: Documentation: add notes about performance penalty when using ecryptfs.

---
(limited to 'docs/howtos')

diff --git a/docs/howtos/encrypted_trisquel.html b/docs/howtos/encrypted_trisquel.html
index 2529da4..e4b60fc 100644
--- a/docs/howtos/encrypted_trisquel.html
+++ b/docs/howtos/encrypted_trisquel.html
@@ -35,8 +35,14 @@
 	</p>
 
 	<p>
-		Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols) and when the installer asks you to setup
-		encryption (ecryptfs) for your home directory, select 'Yes'.
+		Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols).
+	</p>
+
+	<p>
+		when the installer asks you to setup
+		encryption (ecryptfs) for your home directory, select 'Yes' if you want to: <b>LUKS is already secure and performs well. Having ecryptfs on top of it
+		will add noticeable performance penalty, for little security gain in most use cases. This is therefore optional, and not recommended.
+		Choose 'no'.</b>
 	</p>
 
 	<p>
@@ -184,6 +190,10 @@
 	</h1>
 
 		<p>
+			If you didn't encrypted your home directory, then you can safely ignore this section.
+		</p>
+
+		<p>
 			Immediately after logging in, do that:<br/>
 			$ <b>sudo ecryptfs-unwrap-passphrase</b>
 		</p>
--
cgit v0.9.1