Updated Backup to rsync.net via ZFS (markdown)
@ -94,9 +94,11 @@ The backup VM is just a dedicated VM with you as the only user.
|
||||
|
||||
Although rsync.net is a very professional and trustworthy company, i still will layout the security implications and how you can mitigate some of them with ZFS encryption:
|
||||
|
||||
* The rsync staff can login to your VM to support your machine, so this means they can easily access your data. Even if you use encryption, as long as the key is loaded on the target they could access your data.
|
||||
* You're allowed to deny them access by removing they ssh key. (but this can have some other implications, like updates and support)
|
||||
* The rsync staff can login to your VM to for support reasons, so this means they can easily access your data. Even if you use encryption, as long as the key is loaded on the target they could access your data.
|
||||
* You are offcourse allowed to deny them access by removing their ssh key.
|
||||
* To make absolutely sure your data is safe without denying anyone access, you should encrypt your data on the source side. (on your server) This will be send over in encrypted form to rsync.net
|
||||
* Also look at [How zfs-autobackup handles encryption](/wiki/Encryption)
|
||||
|
||||
|
||||
### Crypto ware
|
||||
|
||||
|
||||
Reference in New Issue
Block a user