4 ms·

> ZIP Are they serious? Security conscious users a) still have to give up an encrypted copy of their private key, ripe for cracking, and b) they are supposed t

> ZIP Are they serious? Security conscious users a) still have to give up an encrypted copy of their private key, ripe for cracking, and b) they are supposed to download all their terrabytes of data in zip form, presumably over HTTP with no resume option? Smh...

mrchucklepants 9y ago
They state the downloads are sent over HTTPS. They also have a downloader that allows for resumable downloads [1]. [1] https://help.backblaze.com/hc/en-us/articles/217665908-How-to-Use-the-Backblaze-Downloader-Mac- https://help.backblaze.com/hc/en-us/articles/217665908-How-t...
loeg 9y ago
Additionally, zip password security (non-AES) is known to be poor. (And AES encrypted zip isn't widely supported.)
atYevP 9y ago
Yev from Backblaze here -> The .zip option is the fastest way for folks to get their data back quickly - it's downloaded over HTTPS and we have a Downloader (which can restart interrupted downloads [browsers can only do so much] if they are larger). Folks with A LOT of data to restore usually opt for a USB Flash Key or a USB Hard Drive restore - which is sent, encrypted, via FedEx. Usually that one is used for complete system failures or recoveries.
lol768 9y ago
Why does ZIP imply: * Unencrypted HTTP And why is it that HTTP implies no resume (Range header has existed since HTTP 1.1 if I recall correctly)?
- brianwski 9y ago
  Brian from Backblaze here. > Range header has existed since HTTP 1.1 Backblaze built the original zip restore functionality in 2007 and I believe the range header was introduced after that? We FULLY support the range header in our B2 Object Storage and we actually have support for it (now) in the ZIP file download functionality. However, because we built the client side custom program bzdownloader (our restartable restore downloader) it seems to still succeed in some situations where a web browser doesn't succeed. We can slowly retire our custom bzdownloader application as all web browsers catch up and have restartable downloads.

mrchucklepants 9y ago

They state the downloads are sent over HTTPS. They also have a downloader that allows for resumable downloads [1]. [1] https://help.backblaze.com/hc/en-us/articles/217665908-How-to-Use-the-Backblaze-Downloader-Mac- https://help.backblaze.com/hc/en-us/articles/217665908-How-t...

loeg 9y ago

Additionally, zip password security (non-AES) is known to be poor. (And AES encrypted zip isn't widely supported.)

atYevP 9y ago

Yev from Backblaze here -> The .zip option is the fastest way for folks to get their data back quickly - it's downloaded over HTTPS and we have a Downloader (which can restart interrupted downloads [browsers can only do so much] if they are larger). Folks with A LOT of data to restore usually opt for a USB Flash Key or a USB Hard Drive restore - which is sent, encrypted, via FedEx. Usually that one is used for complete system failures or recoveries.

lol768 9y ago

Why does ZIP imply: * Unencrypted HTTP And why is it that HTTP implies no resume (Range header has existed since HTTP 1.1 if I recall correctly)?

brianwski 9y ago
Brian from Backblaze here. > Range header has existed since HTTP 1.1 Backblaze built the original zip restore functionality in 2007 and I believe the range header was introduced after that? We FULLY support the range header in our B2 Object Storage and we actually have support for it (now) in the ZIP file download functionality. However, because we built the client side custom program bzdownloader (our restartable restore downloader) it seems to still succeed in some situations where a web browser doesn't succeed. We can slowly retire our custom bzdownloader application as all web browsers catch up and have restartable downloads.