409 reputation
bio website
location Bristol, United Kingdom
visits member for 2 years
seen Oct 31 at 16:02

comment Why use a Smartcard for (Two Factor) Auth instead of another medium?
For authentication, that's definitely correct. Since the OP mentioned bitlocker however I presume they're looking for a second factor to secure their decryption key, in which case the smart card will have to reveal its factor/key-share every time the OP asks to decrypt something.
comment How to explain Heartbleed without technical terms?
True that (and though I didn't mention it in the text, +1 reason to use perfect forward secrecy too). For the target audience mentioned in the original question, I'd need to think hard about how to explain mitm attacks in this context.