Re: Feature Suggestion - scp don't decrypt file at destination

Gerard J. Cerchio wrote:
> The idea is this: when this switch is present, the file is encrypted on the
> fly just as always. However when the file reaches the destination, it
> is emitted onto the disk in the transported encrypted state. The
> decryption
> stage is by-passed. The file name is then marked with a unique file
> extension to indicate that it is encrypted.

This won't work without drastic changes to scp and ssh. scp doesn't know
that session keys that ssh uses (and shouldn't) - it just treats ssh as
a secure transport.

If you want encryption for backups, this is a good recipe:

tar zcf - /path/to/whatever | gpg --encrypt -r publickey@domain.com | \
ssh user@backuphost "dd of=backup.tar.gz.pgp"

-d

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://www.mindrot.org/mailman/listi...enssh-unix-dev