From a7d8d59ac1eb23b538b9dc5d3dc0fa639663ac83 Mon Sep 17 00:00:00 2001
From: Francis Rowe <info@gluglug.org.uk>
Date: Thu, 11 Sep 2014 05:26:50 +0100
Subject: Documentation: add notes about performance penalty when using
 ecryptfs.

---
 docs/howtos/encrypted_trisquel.html | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/docs/howtos/encrypted_trisquel.html b/docs/howtos/encrypted_trisquel.html
index 2529da4c..e4b60fc7 100644
--- a/docs/howtos/encrypted_trisquel.html
+++ b/docs/howtos/encrypted_trisquel.html
@@ -35,8 +35,14 @@
 	</p>
 
 	<p>
-		Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols) and when the installer asks you to setup
-		encryption (ecryptfs) for your home directory, select 'Yes'.
+		Set a strong user password (ideally above 40 characters, of lowercase/uppercase, numbers and symbols).
+	</p>
+
+	<p>
+		when the installer asks you to setup
+		encryption (ecryptfs) for your home directory, select 'Yes' if you want to: <b>LUKS is already secure and performs well. Having ecryptfs on top of it
+		will add noticeable performance penalty, for little security gain in most use cases. This is therefore optional, and not recommended.
+		Choose 'no'.</b>
 	</p>
 
 	<p>
@@ -183,6 +189,10 @@
 		ecryptfs
 	</h1>
 
+		<p>
+			If you didn't encrypted your home directory, then you can safely ignore this section.
+		</p>
+
 		<p>
 			Immediately after logging in, do that:<br/>
 			$ <b>sudo ecryptfs-unwrap-passphrase</b>
-- 
cgit v1.2.3-70-g09d2