-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 2017-05-11 20:53, Manuel Amador (Rudd-O) wrote: > On 05/09/2017 07:54 PM, cooloutac wrote: >> On Tuesday, May 9, 2017 at 1:40:03 AM UTC-4, Andrew David Wong >> wrote: >> >> Why? No need to encrypt the database file if the whole VM is >> encrypted. Also, if your database file doesn't use authenticated >> encryption, that's another thing to worry about. You may also >> worry about file-level metadata leakage. >> >>> the database file is automatically encrypted. I just feel like >>> vault > more likely compromised then the file if something is. but I could > be wrong. plus way less space. > > I think when we have paranoid > mode it will be better. > Backing up using anything like > qvm-backup is always going to be much slower — and require the VM > to be off —than any file-level alternative. Plus, if you need to > sync your keyring between different devices, that eliminates the > possibility of using qvm-backup in any efficient way. >
I agree that qvm-backup is slower, bigger, and less efficient than file-level backup/syncing methods, but the tradeoffs are pretty reasonable for a lot of use cases. Since I can just start a script and walk away, it doesn't really matter to me whether it takes a few extra minutes while I'm not there. Don't get me wrong, though. I'd love to see a more efficient solution that combines some of the best effects of both (e.g., incremental backup). - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIcBAEBCgAGBQJZF2XJAAoJENtN07w5UDAwUL0P/i9TXn0XxN7U65Y8lmquVo2Y 29iUCeW6sfaXbBBsMmiO+Ptf400QAO4RQa0Yylrg9StROOScsXubbLo1ZBh9alsC ohGxBIDaG0dUsaAqKnlHLBmyieYBZIbZ5qf93PwvldIJG1M8s8dfuvtKQFZa1zrF E4ALvxs0qwkcO4zsXIrom2IwXLU5+DVov2N02qegxr3GBYTQEpq+k+meSNNEbpQi N2CE+LU1oSSK7nI9zITVsICLJ3gROboh/h3EtgqS0BfmXLkHAgZ6EBMvw8KzkodM HzJjRGfLKNo+kmJ/A+vdwfqO8FSKjBiC9cj2+vMrxmPbJYyc56pI7ircOVuTZETX 7COnAXveluyiej3qyXVUwgTaA6a1TAmaUJntEdtS1MWKlJ97nawPrPQFvGlh5IVg yNZE3VphAbwJqyTFNI4ls5VrpVXgQ69lplcZFjWfe1OUqdWkiNwpBFi6yyWsRIq8 ZrBpVkNhlQe9Il2gX0iAsyKjjMgQxRPI50rNQ2EykLOeieRmJVv/cYkd7zOLU1t4 Lc760+odYqNW/ldXd1ndQIdhmlGbxOIc3ripLfklitlQtnYubAC28IYvp5jN30M/ 4N7/N1HILAn8ssK4PTQycTPHNDLATG2wevvsM2K/ULjDHSrdjl2ir+Xn0VATjWXR 3fL65dRUR+U8aUYzCDp6 =3/mC -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/eae91840-9d76-4a38-f923-ff3c5b668e70%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
