[Box Backup] Certificate management

[Nick Knight]

Can you move the data from the old account to a new account - as the
account may contain history which is important

-----Original Message-----
From: boxbackup-admin@fluffy.co.uk [mailto:boxbackup-admin@fluffy.co.uk]
On Behalf Of Ben Summers
Sent: 08 February 2005 09:44
To: boxbackup@fluffy.co.uk
Subject: Re: [Box Backup] Certificate management


On 8 Feb 2005, at 09:43, Nick Knight wrote:

> Hello all,
>
> I am looking to write some procedures for our internal use on using
> boxbackup, most of it is done so far but there is a coupe of=20
> outstanding
> procedures I need to still write.
>
> The main one is what to do if a client thinks certificates has
possible
> fallen into the wrong hands. In this situation what is the best
> procedure to follow, i.e. which certificates should be regenerated,
and
> how should the old ones be blocked.

I don't see the certificates as being terribly important, to be quite=20
honest. They're really just used to ensure end to end encryption. There=20
isn't a specific mechanism to block them at the moment, apart from=20
deleting the account on the server and starting again with a different=20
account number.

The important thing is the keys file. If that is lost, move the current=20
backups offline, and start again with a new keys file (and a new=20
account number, in case the cert got lost too.)

Ben



_______________________________________________
boxbackup mailing list
boxbackup@fluffy.co.uk
http://lists.warhead.org.uk/mailman/listinfo/boxbackup