| |||||||||||||
Backing up in trees with Obnam 1.0Backing up in trees with Obnam 1.0Posted Jun 7, 2012 16:53 UTC (Thu) by joey (subscriber, #328)In reply to: Backing up in trees with Obnam 1.0 by grahame Parent article: Backing up in trees with Obnam 1.0
I've used Obnam a little bit. Now that 1.0 is out I plan to replace my duplicity backups with it. I've been finding duplicity to be rather creaky, and the times I've needed to restore a few files have been painful. I need encrypted offsite backups, and Obnam's killer feature for me is supporting that.
Quite a lot of care has gone into Obnam's use of gpg too. It doesn't just encrypt data to a single gpg key, which would prevent changing keys later without reencrypting all the data. Instead, it encrypts data using a secret key that is itself encrypted by your gpg key(s). So new keys can be given access. The scheme is explain here: http://liw.fi/obnam/encryption/
I liked that so much I implemented the same scheme in git-annex for its gpg encryption.
(Log in to post comments)
Backing up in trees with Obnam 1.0 Posted Jun 15, 2012 9:02 UTC (Fri) by Darkstar (guest, #28767) [Link]
This is actually how public key encryption is meant to be used. You should never use it to encrypt data directly, ONLY for encrypting the symmetric key. Otherwise the whole scheme becomes less secure
|
|||||||||||||