Re: Job switch for encryption?
Marco Gaiarin <[email protected]>
| Newsgroups | gmane.comp.bacula.user |
|---|---|
| Organization | Il gaio usa sempre TIN per le liste, fallo anche tu!!! |
| Message-ID | <[email protected]> |
Mandi! Bill Arlofski via Bacula-users
In chel di` si favelave...
> These two things are 100% unrelated in Bacula.
OK.
> The `signature` setting in a Fileset's Options{} block is used to create and add a hash of each file to the catalog so that
> on restore or verify it can be confirmed that the data that is restored/verified is exactly as it was when the filedaemon
> read it and created the hash during the backup job.
OK, so speaking plainly this is 'file level hashing', while 'PKI Signatures'
work at block level? data level? Entire backup level? ;-)
>> b) what happen if i set 'PKI Encryption = Yes' and 'PKI Signatures = No'?
> The Filedaemon will encrypt, but not sign the data it sends to the SD during a backup.
> This may clarify it better: https://www.securew2.com/blog/pki-digital-signature
I'm only curious to know how can be useful an encryption without
signatures...
Anyway, thanks!
--