[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

cache dir security



Hi,

We're using tarsnap here at Bump and I'm working on setting up a
secure location for doing backup management. I.e., deleting old
nightlies that we are done with so that we don't grow forever.

I'm using an encrypted filesystem on this server as one of the steps
for protecting our master keys (the ones that can issue deletes).

Should I/do I need to put the cache directory in this encrypted space?
I suppose more directly my question is: if someone gets their hands on
the contents of my cache directory -- but nothing else -- what is my
risk exposure? What can be done with that data?

I did some rudimentary Google searching but wasn't able to find the
answer to this question. Thanks in advance.


-- 
Mark Smith // Operations Lead
mark@bumptechnologies.com