Encrypt everything, including encryption at rest. Filesystems, swap, etc. Use a modern algorithm, and strong factors to protect your key.

It doesn't matter that you have nothing to hide—keep your data your own. At rest, during transport, and as much as you can during use.

Normalize encryption.

Comments