[kwlug-disc] GUI Backup Software

[Jason Locklin]

On 12/06/14 06:11 PM, unsolicited wrote:
> Let the filesystem do the encrypting, then?
> 
> Back to, let each element do what it does really, really, well, and
> only? Backups do backups, encrypting filesystems do encrypting?



The benefit to encrypted backups is that they can be sent to an
un-trusted server (like an online storage service). Filesystem
encryption doesn't help as the server will need the keys. Many of us
don't have more than one physically secured location, and the idea of
trusting unknown administrators at some company with your personal, or
potentially sensitive files should be repugnant.

Most people's solution seems to be either send everything, in the clear,
around the world to various unknown "clouds," or keep everything on-site
where a single fire or robbery can take everything. A better solution to
that is to encrypt everything but send it to redundant locations.  I use
local un-encrypted mirrors, and two completely independent, encrypted,
automated off-site backups. Sure, that may not be enough, but the
solution wouldn't necessarily be to go clear, but to increase redundancy
further.