Hacker News Reader

I don't understand why Windows 10 doesn't take an encryption first approach. When you install Windows 10, it should default to having disk encryption checked.

View on HN

Not certain this is the reason why, but there is a real perf hit for full disk encryption which not everyone needs to take, especially for devices without hardware accelerated crypto. Lower end devices can slow to a crawl.

Can you specify what are those devices which do not have hardware encryption support? Processors have had hardware support for ages. On the Intel side, at least from 2006, with the Core2Duo.

Any modern system(even on the low end) that you could conceivably want to trust important data to can handle encryption requirements with ease.

One problem if we are talking about Bitlocker specifically is that if the drive reports that it supports encryption, then Bitlocker offloads the responsibility to the drive. And the drive encryption might be badly implemented.

Reply on news.ycombinator.com