thinko
This commit is contained in:
parent
3162a724f1
commit
bd40e0c777
1 changed files with 4 additions and 3 deletions
|
@ -27,13 +27,14 @@ the data, should be the only clues to what type of data you are storing in
|
|||
S3.
|
||||
|
||||
[[!template id=note text="""
|
||||
This scheme was originally developed by Lars Wirzenius at al [for Obnam](http://braawi.org/obnam/encryption/).
|
||||
This scheme was originally developed by Lars Wirzenius at al
|
||||
[for Obnam](http://braawi.org/obnam/encryption/).
|
||||
"""]]
|
||||
The data stored in S3 is encrypted by gpg with a symmetric cipher. The
|
||||
passphrase of the cipher is itself checked into your git repository,
|
||||
encrypted using one or more gpg public keys. This scheme allows new public
|
||||
encrypted using one or more gpg public keys. This scheme allows new private
|
||||
keys to be given access to a bucket's content, after the bucket is created
|
||||
and is in use. It also allows revoking compromised public keys without
|
||||
and is in use. It also allows revoking compromised private keys without
|
||||
having to throw out the contents of the bucket. The symmetric cipher
|
||||
is also hashed together with filenames used in the bucket, obfuscate
|
||||
the filenames.
|
||||
|
|
Loading…
Add table
Reference in a new issue