On 10/11/11 12:39 PM, Darren J Moffat wrote: >> Maybe better question is: Is data stream encrypted, >> when sending encrypted zfs dataset changes from one system to another, >> using zfs send? > > Not it is not, the ZFS send stream is the data as seen at the DMU > layer of ZFS and is taken from the ARC. This means it is both > decrypted and decompressed. This is how ZFS send works. The send > stream does have the encryption properties stored in it so when you do > the 'zfs recv' you will end up with an encrypted dataset again but the > data encryption keys will be different (because they are generated at > dataset create time). So if receiving side is not using encryption in the dataset, then it will not be encrypted on the receive side if we want it that way?
I guess, why not using this mailing lists one more time, before axe comes for them. I also mostly don't know where they will migrate, I just know is shouldn't die. _______________________________________________ security-discuss mailing list [email protected]
