Dear Christian,Since I'm using both macOS and Linux and backup both of them, I think can add my two cents into the discussion.
I recently started using full disk encryption on removable drives in macOS and, it brings great peace of mind, hence I understand the need for encryption in backups.
As you said, other tools have built-in encryption (e.g. Borg), and you need to mount the backups as filesystems via FUSE.
I think, BiT can drop encryption, but it has to replace it with something useful. Like full documentation for creating encrypted volumes on Linux. Because 1) an encrypted FS is portable between Linux installations, 2) We should never leave users without hope.
This way, we can both slim the code down and focus on the core functionality of BiT - Provide Time Machine like backups with better features, and delegate an important and sensitive feature to the folks who know it probably better than us.
Hope this helps, Cheers, Hakan On 6.05.2024 ÖÖ 10:45, [email protected] wrote:
Hello,this is an X-Post [1]. The background of this discussion is about marking EncFS as deprecated because of security issues and remove it in some years if no contributor jumps in to replace it with something else (e.g. GoCrypt).It's just a thought that came to mind. It's not a concrete suggestion. But of course, I'm interested in your opinion on it.Isn't it one of the key features of BIT, compared to other backup tools, that you can access the backup itself without using your backup tool? The backup is just a bunch of files and folders you can use and investigate with your regular file system tools.But when you use EncFS (or another way of encryption) this features is lost. I have not used EncFS in the wild. I might be wrong.If EncFS really is the reason for losing this feature I ask myself if it wouldn't be "better" for BIT to really remove EncFS and not replace it with something else. It would give BIT a more focused set of features and behavior. Encryption is another job a user should achieve with another tool; e.g. encrypted file system container or an encrypted filesystem (some LUKS magic).I am aware that there are lot of backup tools out there offering encryption. But these tools producing a backup in a format that can be used (and restored) only with the backup tool itself. So this is a another group of users targeted here.Marking EncFS as deprecated and reading the reactions of users about it will give us an idea about how much needed such a feature is.Best, Christian Buhtz[1] -- <https://github.com/bit-team/backintime/ issues/1549#issuecomment-2095373077>_______________________________________________ Bit-dev mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3/lists/bit-dev.python.org/ Member address: [email protected]
OpenPGP_signature.asc
Description: OpenPGP digital signature
_______________________________________________ Bit-dev mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3/lists/bit-dev.python.org/ Member address: [email protected]
