News:

OS2World.com Forum is back !!!

Remember to visit OS2World at:
http://www.os2world.com

Main Menu

Encrypting Home Directory ?

Started by Greggory Shaw, July 24, 2014, 08:31:51 AM

Previous topic - Next topic

Greggory Shaw

Does eCS use the Home directory on startup ?

I've been playing around with rsync and AES, stunnel, others.

And AES with rsync, stunnel you need control of both points.

Sftp from Openssh ?

Thanks

Greggory

dbanet

The best way to have your home directory encrypted is to use AEFS. NDCrypt with NetDrive may also be an option, but in this case you would need to pay for NetDrive at first, and for NDCrypt itself, at second.

It also may be reasonable to move your desktop directory in your home directory, so that it'd be encrypted too.

Greggory Shaw

Quote from: Boris on July 26, 2014, 09:48:38 AM
The best way to have your home directory encrypted is to use AEFS

...

Thanks that what I was planning on doing and testing it with Rsync too. I'm going to try and get Paul to port a better solution.

dbanet

Quote from: Greggory Shaw on July 27, 2014, 06:50:20 AM
Quote from: Boris on July 26, 2014, 09:48:38 AM
The best way to have your home directory encrypted is to use AEFS

...

Thanks that what I was planning on doing and testing it with Rsync too. I'm going to try and get Paul to port a better solution.

Why rsync?

Greggory Shaw

#4
Quote from: Boris on July 27, 2014, 07:14:41 AM

Why rsync?

I have a OS/2 server with a overlay of eCS.

I use a hot key for popup and drag and drop files on a CMD file of rsync for a Dropbox on my server and my public folder.

And stunnel and rsync for backups. But there's not a good way to encrypt data and rsync it to a third party server on OS/2.  So, Im going to check out how many files change on an encrypted AES directory and rsync it. If you know of a better way, please tell. 

I would like to add this to the OS/2 coummity - for offsite backups !

http://duplicity.nongnu.org


Greggory



dbanet

Quote from: Greggory Shaw on July 27, 2014, 07:49:07 AM
Quote from: Boris on July 27, 2014, 07:14:41 AM

Why rsync?

I have a OS/2 server with a overlay of eCS.

I use a hot key for popup and drag and drop files on a CMD file of rsync for a Dropbox on my server and my public folder.

And stunnel and rsync for backups. But there's not a good way to encrypt data and rsync it to a third party server on OS/2.  So, Im going to check out how many files change on an encrypted AES directory and rsync it. If you know of a better way, please tell. 

I would like to add this to the OS/2 coummity.

http://duplicity.nongnu.org


Greggory

The easiest way to transfer data with rsync securely is rsync over ssh, of course.

Greggory Shaw

Quote from: Boris on July 27, 2014, 08:03:31 AM

The easiest way to transfer data with rsync securely is rsync over ssh, of course.

Ok, smarty pants !

The Os/2 versions of Rsync and ssh don't work together !  And even if they did data wouldn't be encrypted at the end point ?

dbanet

#7
Quote from: Greggory Shaw on July 27, 2014, 08:08:14 AM
The Os/2 versions of Rsync and ssh don't work together !

Are you sure? Have you tried?

If that's true, that's stupid and should be fixed.

Quote from: Greggory Shaw on July 27, 2014, 08:08:14 AM
And even if they did data wouldn't be encrypted at the end point ?

Oh. Well sorry, I thought you trust the remote server, but don't trust the data channel. It's partly hard to understand what you say for me.

If you don't trust the remote, you can indeed use an AEFS container or a passworded RAR archive.
But you will have to transfer the whole container/archive even if you change one byte in it (at least that's how good encryption should work), as it changes fully. Therefore I don't get where are you going to apply rsync in this case.

Or are you going to encrypt each file separately?

Greggory Shaw

#8
Quote from: Boris on July 27, 2014, 08:18:34 AM
Quote from: Greggory Shaw on July 27, 2014, 08:08:14 AM
The Os/2 versions of Rsync and ssh don't work together !

Are you sure? Have you tried?

If that's true, that's stupid and should be fixed.

I'm the one that asked Paul for a different build and there's a 30+ message thread on it on the Yahoo group.

Quote from: Greggory Shaw on July 27, 2014, 08:08:14 AM
And even if they did data wouldn't be encrypted at the end point ? But there's not a good way to encrypt data and rsync it to a third party server on OS/2.


This would take care of everything:

http://duplicity.nongnu.org/

dbanet

Quote from: Greggory Shaw on July 27, 2014, 08:25:51 AM
Yahoo group.

I don't read newsgroups.

Quote from: Greggory Shaw on July 27, 2014, 08:25:51 AM
This would take care of everything:

http://duplicity.nongnu.org/

Well, if you know what to do, then I do completely misunderstand what's this thread for.

Greggory Shaw

#10
Quote from: Boris on July 27, 2014, 08:33:23 AM

Well, if you know what to do, then I do completely misunderstand what's this thread for.

Because you didn't completely read anyone of my txt :) starting with I don't know what rsync and ssh does :)

Quote
I'm going to try and get Paul to port a better solution.

http://duplicity.nongnu.org/

dbanet

Quote from: Greggory Shaw on July 27, 2014, 08:52:13 AM
Because you didn't completely read anyone of my txt :) starting with I don't know what rsync and ssh does :)

Excuse me, can you please rephrase yourself?