Date: Mon, 26 Nov 2001 17:53:20 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Randy Bush <randy@psg.com> Cc: "R.P. Aditya" <aditya@grot.org>, freebsd-security@freebsd.org Subject: Re: crypted remote backup Message-ID: <20011126175320.C20635@xor.obsecurity.org> In-Reply-To: <E168Wnh-0000EG-00@rip.psg.com>; from randy@psg.com on Mon, Nov 26, 2001 at 05:12:41PM -0800 References: <E168Qts-000Bj5-00@rip.psg.com> <lolmgtgkom.fsf@mighty.grot.org> <E168Wnh-0000EG-00@rip.psg.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--vEao7xgI/oilGqZ+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Nov 26, 2001 at 05:12:41PM -0800, Randy Bush wrote: > > If you want rsync to only copy the updated/modified stuff you'll have > > to do the encryption on the "source" server and keep it in a separate > > "tree" >=20 > so i have been thinking >=20 > > and using PGP/GPG to do the encryption is the easiest way I've found to > > do it. >=20 > is this feasible for 2GB files? I wouldn't recommend using it on all 2GB..a single bit error will render your backup useless. That's why I suggested breaking the file into chunks in my earlier mail. I wouldn't recommend using PGP either; you probably don't need it, and it will be slower than alternatives. Just use OpenSSL..e.g. an appropriate symmetric cipher and passphrase. Kris --vEao7xgI/oilGqZ+ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8AvIPWry0BWjoQKURAkm4AKCQxkjexCoNrplni7NytYkKy7ti3ACfaGp1 f+XKE7Hp08/XZ8Ioy3J/nT4= =sGvD -----END PGP SIGNATURE----- --vEao7xgI/oilGqZ+-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011126175320.C20635>