View Single Post
Old 21st May 2014
jggimi's Avatar
jggimi jggimi is offline
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 7,983
Default

Quote:
Originally Posted by Tzzzzzzzz View Post
...private ftp server (backup). Normally i use encrypt to create a virtual drive and mount it into the ftp server directory.
FTP is an insecure protocol. All information, including passwords, are sent in the clear. There is no encryption of the data moved via network. Alternative services that provide for encryption of data in motion, have well understood key management techniques and robust authentication schema should be considered instead. Such as sftp(1), or ssh(1).

For data at rest, OpenBSD has two encryption technologies for filesystems. There is the CRYPTO discipline of softraid(4), which is recommended for general use, and the older encryption capability of vnconfig(8), which may be useful in some circumstances.

Last edited by jggimi; 21st May 2014 at 11:08 PM. Reason: clarity again. And two typos.
Reply With Quote