• @exi@feddit.de
      link
      fedilink
      02 years ago

      You can’t trust any full disk encryption without it because only a TPM can verify that your bootloader and initrd are not compromised.