To the best of my recollection… If you stream your ZFS data from one host to another then the encrypted filesystem remains encrypted at the destination. If yo

To the best of my recollection… If you stream your ZFS data from one host to another then the encrypted filesystem remains encrypted at the destination. If your encryption is done outside of ZFS then the data on the destination is in plaintext. This might seem obvious to those experienced but to a newcomer it caught me off guard and the interaction between recursive send/receive and encryption was more complicated than I had expected. I should add that I haven’t looked into this for a while and could be completely wrong but it’s worth researching, at least, because my spideysense is definitely tingling to the tune of something about this was odd and worth knowing about. This post might give a better hint to the actual details: https://www.truenas.com/community/threads/cant-zfs-send-between-encrypted-pools.90532/ https://www.truenas.com/community/threads/cant-zfs-send-betw... Sorry to not be more authoritative. Bottom line: if you are going to use send/receive, spend some time to build a run book for your use case sooner rather than later.