RE: PCI, EFS and the future?

["Gressick, Michael" <mgressick () cybersource com>]

> May I ask why you feel that EFS is the wrong solution? On the face, it
> seems to satisfy all the PCI data storage encryption requirements ....

Funny, Visa just hosted a PCI-DSS seminar at their offices in Foster
City and this very issue came up...

Section 3.4.1 of PCI-DSS 1.1 specifically states that "Decryption keys
must not be tied to user accounts."  The gentleman that was speaking, a
Mr. Chris Mark said they were specifically talking about EFS but could
not call it out by name.