3 ms·
Layered security. If there's a vulnerability in your access control, the encryption prevents data from being accessed (decrypted). If there's a vulnerability in
by justin_oaks 8y ago
Layered security. If there's a vulnerability in your access control, the encryption prevents data from being accessed (decrypted). If there's a vulnerability in the encryption, the access control prevents the data from being read.
- blattimwind 8y agoI'm not saying it shouldn't be done, but I've seen a number of projects which have been started (and afaik abandoned as soon as the author saw that backup software isn't quite so simple to develop) specifically because asymmetric crypto was seen as a missing flagship feature. What I'm saying here is, if you start a new backup software project today, there are more important things to consider and failings of existing software to address than not supporting asymmetric crypto. Do the encryption right. Do proper access controls. Get concurrency right. Get deduplication right. Get your archive/snapshot format right. Get filesystem interaction and testing right. Maybe you think existing software does all of that already; it doesn't. (Though I am actually convinced that you can't design a piece fulfilling these requirements without having a lot of prior experience developing backup software — conversely that's the reason why most backup software is so half-baked: they're all first designs, by the time a developer has the necessary experience to do a better second design, they're fed up with backup software and move on).