Microsoft should not have the keys to decrypt Bitlocker ever.

Windows is a closed source and proprietary commercial Operating System. Microsoft is going to do whatever they like with it. If enough people get angry about an issue they may change their mind but that doesn’t change the nature of Microsoft’s ownership over their products.

I’ve been participating in discussion about what Microsoft should and shouldn’t do since the late 80s and it pretty much boils down to this: You need to select and use software that works the way you want it to. So if you don’t want MS to have your disk encryption key then don’t use Windows. If you don’t want MS to have access to your documents then don’t put them on any system that MS has control over.

It can be terrible inconvenient to protect your data in this way but this part and parcel of the privacy movement.

It may seem that way but I’m really not. An encryption key is just data. It’s critical security data to be sure but it’s still data and like other data you shouldn’t share anything that you wouldn’t want made public.

Don’t want MS to cough up your data when asked? Then don’t give it to them. In regards to your BL key that means storing it another way, such as on a jump drive or printing it out.

In the end if you have data of any type that you absolutely DO NOT want made public then you need to retain that data locally. If that means leaving the Microsoft or any other ecosystem then that’s the price that needs paid for keeping your data under your control.

This is the foundation of the entire privacy movement.

The encryption key is data, don’t give it to ANYONE. “Two people can keep a secret if one of them is dead.”

The word “Gave” is really doing some heavy lifting in that title. Microsoft produced the keys in response to a warrant as required by law.

If you don’t want a company, any company, to produce your data when given a warrant then you can’t give the company that data. At all. Ever.

Not fast food joints, not Uber, not YouTube, not even the grocery store.

It’s easy to do. Mine is a reolink piped through Home Assistant.

I hear ya but honestly you wouldn’t have the service let alone the devices without it.