To use tails, I have always used a DVD, because of the fact I know it will not be tampered with, at least within reason. However there are endless reasons why a USB boot option would be faster, and in the current project I am building, it is the only real choice.
Here is what I do not get, and why because it seems so glaringly overlooked, I figure I must be misunderstanding something... When tails installs to a USB drive, why does it not encrypt the partition, and require a pre-boot authentication to protect the drive integrity?
As it stands I can mount the drive on another computer, tinker with it, and make that tails installation compromised.
That way just like any other OS, you cannot side attack the OS with physical possession of the disk without having to break encryption?
I am not finding much chatter on it so again, am I just missing something?
The end result I want is the disk to not boot into my install, or allow mount elsewhere, without having to authenticate first, and if the disk is lost/stolen, borrowed or whatnot... That it is all safely encrypted.
Edit: So after some helpful comments, this seems that it would not work exactly as expected.
So pending not the outcome I had hoped, I could potentially buy small SSDs use GRUB to boot the ISO from inside the drive, that way I could verify the integrity of the ISO file, and that file would be stored on the encrypted side of the disk... Something similar to this.
Optical drives are battery hogs, and if the system could have the secondary battery in that bay, plus the lower power consumption... Well the prototype was working at almost 8.5 hours battery life! That was awesome.
Unfortunately this project's time requirements are likely going to reduce its profit margin to 0 or - which will equal not going to happen...