Re: Glacier Storage

[Colin Percival <cperciva@tarsnap.com>]

On 02/23/15 05:28, John Gamble wrote:
>> Understood.  And for this, the best solution is probably to use something
>> other than Tarsnap.  Given that you're going to upload them once and never
>> touch them again (hopefully) there are lots of tools which will do the job
>> for you -- removing the need for deduplication makes everything much simpler.
> 
> Can you suggest what other service might be useful in this situation?  I'm
> curious to know, as it might be something I'd want to look into at some point.

If I was going to put "cold" data into Glacier, I would probably encrypt it
using scrypt and then upload it directly.  I think the AWS Console even lets
you do this from a web browser.

The key issue here is that when you take deduplication out of the picture,
you can encrypt and upload separately; which means that as long as you do
the encryption using a good tool, the tool you use to upload your data doesn't
need to be written with any awareness of security or cryptography.

-- 
Colin Percival
Security Officer Emeritus, FreeBSD | The power to serve
Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid