> I am very uninterested in any sort of "cloud" backup
> scheme that does not integrate encryption on the client
> side.
Does anyone know how to get rsync-like functionality with the data at the other end stored encrypted?
I currently use rsync over ssh for some of my backups, so the data is encrypted on the wire but unencrypted on the remote disk. When I set this up I tried to find a way of storing the remote copy encrypted without losing rsync's efficient incremental transfers, but I didn't find anything satisfactory. Any ideas?
Posted Oct 15, 2009 12:26 UTC (Thu) by fghorow (subscriber, #5229)
[Link]
From Colin Percival, the (Free?)BSD Security officer.
Just a happy user of the service.
(Be aware, it is a *for a fee* service, but the micropayments are truly micro!)
Howto fix the problem:
Posted Oct 15, 2009 13:09 UTC (Thu) by sourcejedi (guest, #45153)
[Link]
Try encfs + rsync. Encfs will encrypt both file content and names. (It won't hide filesizes, directory topology, permissions, and the approximate _lengths_ of filenames).
Posted Oct 15, 2009 16:01 UTC (Thu) by zooko (subscriber, #2589)
[Link]
Tarsnap seems like a well-engineered system, from reading the author's blog, but as far as I know
the server-side code is proprietary. The Tahoe-LAFS project (I'm a contributor) has excellent
encryption and erasure-coding features and if you like duplicity you can use Tahoe-LAFS as a
backend for duplicity. Also Tahoe-LAFS comes with its own integrated backup system which has
different trade-offs than the duplicity backend. (Duplicity does deltas for you, but you can't view or
download your files without going through duplicity. The Tahoe-LAFS integrated backup doesn't do
deltas, but it stores the files in a time-machine-style layout which you can browse and download
through the web.)