<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 11/28/21 08:29, Henrik Hemrin wrote:<br>
</div>
<blockquote type="cite"
cite="mid:C122DE6B-66D9-4D0B-8FFA-646CDC83A00C@hemrin.com">
<pre class="moz-quote-pre" wrap="">I have always considering someone else cloud as one backup. But if so, I want for privacy have my own encryption on that storage. How do you do?</pre>
</blockquote>
<p>My home-grown backup solution which I mentioned previously
encrypts both file contents and file names before upload. This
makes maintenance of the cloud backup somewhat more complicated,
but I view it as worth the privacy.</p>
<p>Many of the available off-the-shelf cloud backup solutions
support similar client-side encryption which makes it impossible
for anyone without the encryption key to read the data in the
cloud. Just don't lose your encryption key! I keep mine in my
password manager (Bitwarden), and I back up the contents of the
password manager monthly (yes, I am very paranoid abut things like
this). See, for example, <a moz-do-not-send="true"
href="https://www.backblaze.com/cloud-backup.html">Backblaze's
personal backup solution</a>, which says, "You can use a private
encryption key for additional security, ensuring only this key can
unlock your backup." CrashPlan and iDrive also support encryption.<br>
</p>
<blockquote type="cite"
cite="mid:C122DE6B-66D9-4D0B-8FFA-646CDC83A00C@hemrin.com">
<pre class="moz-quote-pre" wrap="">One reason for having backup, is physical failure of the main drive, fire etc. But another is infection, ransomware and so on. And considering infection, I wonder what you think about that infection may propagate to backup-copies (directly connected, via local network or external cloud)?</pre>
</blockquote>
<p>Backup drives directly connected to your computer are definitely
at risk if you fall prey to a ransomware attack. You should make
sure that your cloud backup solution saves previous versions of
files and supports point-in-time recovery. I believe Backblaze,
CrashPlan, and iDrive all support that, though they all have
different policies for how many old versions of files are
preserved and for how long, so you should carefully before
purchasing.</p>
<p>Some backup solutions also support immutable backups, which
guarantee that even if an attacker goes so far as to access your
backup's cloud storage they won't be able to delete old backups.
The one that comes to mind first with this functionality is <a
moz-do-not-send="true"
href="https://www.rsync.net/resources/howto/snapshots.html">rsync.net</a>.</p>
<p> jik</p>
<br>
</body>
</html>