Re: Encrypted repositories
- From
Enrico Weigelt <enrico.weigelt@vnc.biz>
- Date
- Sep 8, 2012, 03:34 UTC
- Message-ID
- <0666bd29-b156-4c3d-b859-ab140d2f849e@zcs>
- In-Reply-To
- <7vmx132aph.fsf@alter.siamese.dyndns.org>
Show 6 quoted lines
> > Well, everybody can access the objects, but they're encrypted, > > so you need the repo key (which, of course isn't contained in > > the repo itself ;-p) to decrypt them. > > So, in short, blobs are not encrypted with the hash of their > contents as encryption keys at all.
No, the blobs are encrypted with their content hash as key, and the encrypted blob will be stored with it's content hash as object id.
Show 6 quoted lines
> > For the usecases I have in mind (backups, filesharing, etc) this > > wouldn't hurt so much, if the objects are compressed before > > encryption. > > For that kind of usage pattern, you are better off looking at > encrypted tarballs or zip archives.
No, that doesn't give us anything like history, incremental synchronization, etc, etc.
What I finnaly wanna has is a usual git, just with encryption, but I can live with loosing differential compression.
cu
-- Mit freundlichen Grüßen / Kind regards Enrico Weigelt VNC - Virtual Network Consult GmbH Head Of Development Pariser Platz 4a, D-10117 Berlin Tel.: +49 (30) 3464615-20 Fax: +49 (30) 3464615-59 enrico.weigelt@vnc.biz; www.vnc.de