In the future, full encryption is default, and Fedora WorkStation distribution is improving Btrfs fscrypt encryption
CTOnews.com Fedora Workstation developers and the Red Hat team are working together to improve Fedora's disk encryption status, with the ultimate goal of enabling full disk encryption by default.
Source: Pop!_ OS Most Linux distributions have full encryption built in, but only Pop!_ Very few distributions such as OS are enabled by default, and future versions of Fedora Workstation will join this list.
Owen Taylor of Red Hat said in today's mailing list and Discourse posts that encryption keys are stored in the system's Trusted Platform Module (TPM) and bootloader / kernel / initrd is signed with TPM signatures.
CTOnews.com has learned from reports that Fedora Workstation will use upcoming Btrfs fscrypt support to encrypt systems and home directories.
