Re: [Burp-users] Encryption and dedup

[Saint G. <sai...@gm...>]

On Saturday, 25 May 2013, Graham Keeling <ke...@sp...> wrote:
> On Fri, May 24, 2013 at 12:34:00PM +0200, Saint Germain wrote:
>> Hello,
>>
>> If we activate the encryption (client side) for several clients, I
>> understand that the delta differencing is not working anymore.
>> If we use a different key for each client, I suppose that the
>> deduplication will not work anymore.
>> But what if we use the same key for each client ? Will the deduplication
work ?
>>
>> It is in the context of a local backup with rsync to a remote server
>> where I don't trust the remote server (because server security is
>> difficult to maintain). I have thought about several other schemes
>> (rsyncing to EncFS for instance) but I haven't found a better solution
>> than asking Burp to encrypt . The downside is that my local backup is
>> also encrypted. Maybe someone may have a better idea ?
>
> I haven't tried it, but you could have the local backups going onto an
> encfs partition, and then rsync the encrypted encfs directory remotely.
> That means that you can see the files unencrypted on the local server (so
bedup
> will work) but the remote server only sees encrypted files, and you don't
have
> to configure encryption on each of the clients.
> The offsite rsync will probably not be efficient because changed files
will
> change completely, but I am not sure that there is anything you can do
about
> that anyway.
>

Hum I haven't thought about that. The drawbacks would be that I cannot use
your nice offsite backup script and that I may not have the guarantee that
the offsite backup is working at any time (if the rsync is not finished).

I guess that I will have to try and see what happened. I will let you know
the result of my experiences !

Thanks for the idea !