4 ms·

https://en.wikipedia.org/wiki/Third-party_doctrine https://en.wikipedia.org/wiki/Third-party_doctrine

• Macha 6y ago
  Use borg or other encrypted backup tool (Restic is also recommended by others in this thread). rsync.net is my offsite backup. Doesn't matter what anyone demands of them, all they ever see is an encrypted blob.
  • thesimon 6y ago
    I have been using Duplicati, but >Backup archives are mountable as userspace filesystems for easy interactive backup examination and restores (e.g. by using a regular file manager). looks like a really nice feature of borg. Thanks.
    • dvdgsng 6y ago
      sidenote: restic can do that too
  • pavon 6y ago
    You do then need to find somewhere to store an offsite backup of your encryption keys. That said, since those change far less often than your backups, options like a safety deposit box are a more realistic place to store keys than the backups themselves.
    • Macha 6y ago
      Yes, borg also has the option of storing them in the repo itself, protected by a passphrase (think encrypted ssh key files). Anyway, my "home burned down rescue bundle" consists of a flash drive with a keepass export of my password vault and encrypted borg repo key / rsync.net ssh keys at the office. Slightly less accessible in this pandemic world, but no safety deposit boxes needed.
      • rsync 6y ago
        Important to reiterate this, since it's an interesting feature - borg does, indeed, allow you to store the encryption key for your repository inside the repo itself and you just need to remember/safeguard the passphrase. I can't say whether this is a good choice for any particular use-case but I appreciate that it is an option ... For those that are curious, yes, you can later export the key from your repo so that you have a copy elsewhere ...