Author Topic: Encrypting Home Directory ?  (Read 5527 times)

Greggory Shaw

  • Global Moderator
  • Sr. Member
  • *****
  • Thank You
  • -Given: 39
  • -Receive: 19
  • Posts: 420
    • View Profile
Encrypting Home Directory ?
« on: July 24, 2014, 08:31:51 am »
Does eCS use the Home directory on startup ?

I've been playing around with rsync and AES, stunnel, others.

And AES with rsync, stunnel you need control of both points.

Sftp from Openssh ?

Thanks

Greggory
« Last Edit: July 24, 2014, 08:37:31 am by Greggory Shaw »

Boris

  • Sr. Member
  • ****
  • Thank You
  • -Given: 11
  • -Receive: 16
  • Posts: 310
    • View Profile
Re: Encrypting Home Directory ?
« Reply #1 on: July 26, 2014, 09:48:38 am »
The best way to have your home directory encrypted is to use AEFS. NDCrypt with NetDrive may also be an option, but in this case you would need to pay for NetDrive at first, and for NDCrypt itself, at second.

It also may be reasonable to move your desktop directory in your home directory, so that it'd be encrypted too.
LIABILITY DISCLAIMER: this is how I understand and what I know, I may be highly inaccurate, or even completely wrong! There are no claims, promises, or guarantees about the accuracy, completeness, or adequacy of the contents of my posts. Think on your own!

Greggory Shaw

  • Global Moderator
  • Sr. Member
  • *****
  • Thank You
  • -Given: 39
  • -Receive: 19
  • Posts: 420
    • View Profile
Re: Encrypting Home Directory ?
« Reply #2 on: July 27, 2014, 06:50:20 am »
The best way to have your home directory encrypted is to use AEFS

...

Thanks that what I was planning on doing and testing it with Rsync too. I'm going to try and get Paul to port a better solution.

Boris

  • Sr. Member
  • ****
  • Thank You
  • -Given: 11
  • -Receive: 16
  • Posts: 310
    • View Profile
Re: Encrypting Home Directory ?
« Reply #3 on: July 27, 2014, 07:14:41 am »
The best way to have your home directory encrypted is to use AEFS

...

Thanks that what I was planning on doing and testing it with Rsync too. I'm going to try and get Paul to port a better solution.

Why rsync?
LIABILITY DISCLAIMER: this is how I understand and what I know, I may be highly inaccurate, or even completely wrong! There are no claims, promises, or guarantees about the accuracy, completeness, or adequacy of the contents of my posts. Think on your own!

Greggory Shaw

  • Global Moderator
  • Sr. Member
  • *****
  • Thank You
  • -Given: 39
  • -Receive: 19
  • Posts: 420
    • View Profile
Re: Encrypting Home Directory ?
« Reply #4 on: July 27, 2014, 07:49:07 am »

Why rsync?

I have a OS/2 server with a overlay of eCS.

I use a hot key for popup and drag and drop files on a CMD file of rsync for a Dropbox on my server and my public folder.

And stunnel and rsync for backups. But there's not a good way to encrypt data and rsync it to a third party server on OS/2.  So, Im going to check out how many files change on an encrypted AES directory and rsync it. If you know of a better way, please tell. 

I would like to add this to the OS/2 coummity - for offsite backups !
 
http://duplicity.nongnu.org


Greggory


« Last Edit: July 27, 2014, 08:03:58 am by Greggory Shaw »

Boris

  • Sr. Member
  • ****
  • Thank You
  • -Given: 11
  • -Receive: 16
  • Posts: 310
    • View Profile
Re: Encrypting Home Directory ?
« Reply #5 on: July 27, 2014, 08:03:31 am »

Why rsync?

I have a OS/2 server with a overlay of eCS.

I use a hot key for popup and drag and drop files on a CMD file of rsync for a Dropbox on my server and my public folder.

And stunnel and rsync for backups. But there's not a good way to encrypt data and rsync it to a third party server on OS/2.  So, Im going to check out how many files change on an encrypted AES directory and rsync it. If you know of a better way, please tell. 

I would like to add this to the OS/2 coummity.
 
http://duplicity.nongnu.org


Greggory

The easiest way to transfer data with rsync securely is rsync over ssh, of course.
LIABILITY DISCLAIMER: this is how I understand and what I know, I may be highly inaccurate, or even completely wrong! There are no claims, promises, or guarantees about the accuracy, completeness, or adequacy of the contents of my posts. Think on your own!

Greggory Shaw

  • Global Moderator
  • Sr. Member
  • *****
  • Thank You
  • -Given: 39
  • -Receive: 19
  • Posts: 420
    • View Profile
Re: Encrypting Home Directory ?
« Reply #6 on: July 27, 2014, 08:08:14 am »

The easiest way to transfer data with rsync securely is rsync over ssh, of course.

Ok, smarty pants !

The Os/2 versions of Rsync and ssh don't work together !  And even if they did data wouldn't be encrypted at the end point ?

Boris

  • Sr. Member
  • ****
  • Thank You
  • -Given: 11
  • -Receive: 16
  • Posts: 310
    • View Profile
Re: Encrypting Home Directory ?
« Reply #7 on: July 27, 2014, 08:18:34 am »
The Os/2 versions of Rsync and ssh don't work together !

Are you sure? Have you tried?

If that's true, that's stupid and should be fixed.

And even if they did data wouldn't be encrypted at the end point ?

Oh. Well sorry, I thought you trust the remote server, but don't trust the data channel. It's partly hard to understand what you say for me.

If you don't trust the remote, you can indeed use an AEFS container or a passworded RAR archive.
But you will have to transfer the whole container/archive even if you change one byte in it (at least that's how good encryption should work), as it changes fully. Therefore I don't get where are you going to apply rsync in this case.

Or are you going to encrypt each file separately?
« Last Edit: July 27, 2014, 08:20:44 am by Boris »
LIABILITY DISCLAIMER: this is how I understand and what I know, I may be highly inaccurate, or even completely wrong! There are no claims, promises, or guarantees about the accuracy, completeness, or adequacy of the contents of my posts. Think on your own!

Greggory Shaw

  • Global Moderator
  • Sr. Member
  • *****
  • Thank You
  • -Given: 39
  • -Receive: 19
  • Posts: 420
    • View Profile
Re: Encrypting Home Directory ?
« Reply #8 on: July 27, 2014, 08:25:51 am »
The Os/2 versions of Rsync and ssh don't work together !

Are you sure? Have you tried?

If that's true, that's stupid and should be fixed.

I'm the one that asked Paul for a different build and there's a 30+ message thread on it on the Yahoo group.

And even if they did data wouldn't be encrypted at the end point ? But there's not a good way to encrypt data and rsync it to a third party server on OS/2.


This would take care of everything:

http://duplicity.nongnu.org/
« Last Edit: July 27, 2014, 08:31:07 am by Greggory Shaw »

Boris

  • Sr. Member
  • ****
  • Thank You
  • -Given: 11
  • -Receive: 16
  • Posts: 310
    • View Profile
Re: Encrypting Home Directory ?
« Reply #9 on: July 27, 2014, 08:33:23 am »
Yahoo group.

I don't read newsgroups.

This would take care of everything:

http://duplicity.nongnu.org/

Well, if you know what to do, then I do completely misunderstand what's this thread for.
LIABILITY DISCLAIMER: this is how I understand and what I know, I may be highly inaccurate, or even completely wrong! There are no claims, promises, or guarantees about the accuracy, completeness, or adequacy of the contents of my posts. Think on your own!

Greggory Shaw

  • Global Moderator
  • Sr. Member
  • *****
  • Thank You
  • -Given: 39
  • -Receive: 19
  • Posts: 420
    • View Profile
Re: Encrypting Home Directory ?
« Reply #10 on: July 27, 2014, 08:52:13 am »

Well, if you know what to do, then I do completely misunderstand what's this thread for.

Because you didn't completely read anyone of my txt :) starting with I don't know what rsync and ssh does :)

Quote
I'm going to try and get Paul to port a better solution.

http://duplicity.nongnu.org/
« Last Edit: July 27, 2014, 08:56:39 am by Greggory Shaw »

Boris

  • Sr. Member
  • ****
  • Thank You
  • -Given: 11
  • -Receive: 16
  • Posts: 310
    • View Profile
Re: Encrypting Home Directory ?
« Reply #11 on: July 27, 2014, 09:12:00 am »
Because you didn't completely read anyone of my txt :) starting with I don't know what rsync and ssh does :)

Excuse me, can you please rephrase yourself?
LIABILITY DISCLAIMER: this is how I understand and what I know, I may be highly inaccurate, or even completely wrong! There are no claims, promises, or guarantees about the accuracy, completeness, or adequacy of the contents of my posts. Think on your own!