8·
4 days agoI remember on Reddit several years ago I said that automatic bitlocker is the curse of installing W11 on a laptop.
I got down voted so hard. One comment even said you should be thankful because encrypting by default should be the norm.
But yet if I add any thunderbolt device to my windows before I boot it, it requires me to input my 25 character bitlocker key… that’s hosted online within my Microsoft account.
Bitlocker enabling by default without user input is horrible. Hosting the keys online is also horrible. It could be so easy to socal engineer into your Microsoft account.
I redirect all out going dns requests to my self hosted DNS server.
Only one I can’t block is DoH. DoT is easily blocked and my firewall picks up on it.