[GH-ISSUE #6] Backups Not Encrypted #5

Closed
opened 2026-02-26 21:33:58 +03:00 by kerem · 2 comments
Owner

Originally created by @nealhead on GitHub (Jul 30, 2024).
Original GitHub issue: https://github.com/eduardolat/pgbackweb/issues/6

It would appear that the backups in the S3 bucket are stored in an unencrypted ZIP file. Is this intended?

Originally created by @nealhead on GitHub (Jul 30, 2024). Original GitHub issue: https://github.com/eduardolat/pgbackweb/issues/6 It would appear that the backups in the S3 bucket are stored in an unencrypted ZIP file. Is this intended?
kerem 2026-02-26 21:33:58 +03:00
  • closed this issue
  • added the
    wontfix
    label
Author
Owner

@eduardolat commented on GitHub (Jul 30, 2024):

Yes, that's how it works.

PG Back Web encrypts sensitive data (connection strings, keys, etc.) stored in its own database.

Regarding storage, data is encrypted by default on the majority of S3 storage providers, so the responsibility is delegated to them.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html
https://www.backblaze.com/docs/cloud-storage-server-side-encryption
https://docs.wasabi.com/docs/how-secure-is-my-data-1
https://developers.cloudflare.com/r2/reference/data-security/
https://www.digitalocean.com/security/shared-responsibility-model-spaces

<!-- gh-comment-id:2258982246 --> @eduardolat commented on GitHub (Jul 30, 2024): Yes, that's how it works. PG Back Web encrypts sensitive data (connection strings, keys, etc.) stored in its own database. Regarding storage, data is encrypted by default on the majority of S3 storage providers, so the responsibility is delegated to them. https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html https://www.backblaze.com/docs/cloud-storage-server-side-encryption https://docs.wasabi.com/docs/how-secure-is-my-data-1 https://developers.cloudflare.com/r2/reference/data-security/ https://www.digitalocean.com/security/shared-responsibility-model-spaces
Author
Owner

@eduardolat commented on GitHub (Jul 30, 2024):

Maybe in the future when other features on the to-do list are done we can add a flag to add an encryption layer by PG Back Web

<!-- gh-comment-id:2258986761 --> @eduardolat commented on GitHub (Jul 30, 2024): Maybe in the future when other features on the to-do list are done we can add a flag to add an encryption layer by PG Back Web
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/pgbackweb#5
No description provided.