On Wednesday 06 May 2009 19:44:19 Stefan Bertels wrote: > Hi, > > first: item 31 and 23 on the current todo list seem to be duplicates.
Yes, thanks. I noted it and corrected. > > (http://bacula.svn.sourceforge.net/viewvc/bacula/trunk/bacula/projects?view >=markup) > > second: is there an option in bacula to have client-side encryption? Yes, there is both communications encryption and data encryption. > > If not: Maybe this is something for the feature list. This is related to > Windows EFS files support (#31 and #23). Support for Windows EFS is really a different beast ... We need a Windows programmer to do that project, and for the moment, no one has shown an interest ... Kern > > Suggestion: > - allow the client to setup a password or key file for encrypting and > decrypting all data before it is send to the backup server > - file contents should be encrypted (most important part) > - maybe filename,path and other attributes should be encrypted too > - it might be useful to exclude folders from this (e.g. folders where > programs are stored, c:\Windows) to save cpu and backup space > (different machines will have many of those files equally). > Or you might want to have different key for different folders. > > This has some real advantage over EFS (regarding Windows XP): You are > not limited to setup a similar machine using your EFS keys when making > disaster recovery. You could restore the files to any machine (including > unix/linux) after adding password/key there. And: EFS is limited to > Windows and performs not very well. You could use TrueCrypt to protect > your laptop and "bacula client security" to protect the data when it is > leaving your machine for backup (would perform ok for big data, too). > > You probably want to use a symmtric encryption system (AES) for this. > > This might seem something special but I think this might be very useful > when using untrusted storage (e.g. online services). And you would have > some security for backup of very critical (secret) data (network and > storage security). > > Stefan ------------------------------------------------------------------------------ The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your production scanning environment may not be a perfect world - but thanks to Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700 Series Scanner you'll get full speed at 300 dpi even with all image processing features enabled. http://p.sf.net/sfu/kodak-com _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
