At least with restic that is not an issue. See my other comment here: https://news.ycombinator.com/item?id=44626515 https://news.ycombinator.com/item?id=4462651

At least with restic that is not an issue. See my other comment here: https://news.ycombinator.com/item?id=44626515 https://news.ycombinator.com/item?id=44626515 Backups are append only and each host gets its own key, the keys can be individually revoked. Edit: I have to correct myself. After further research, it seems that append-only != write-only. Thus you are correct in that a single host could possibly access/read data backed up by another host. I suppose it depends on use-case whether that is a problem.