Re: [Duplicity-talk] Manifest stores SHA1 hash of files, checked before restore?

[Martin Pool]

On 14 July 2011 01:53, Chris Poole <address@hidden> wrote:
> (Thus, it's very important to sign
> backups being stored in untrusted locations.)

Yes.

I don't think there's much point having ad hoc partial checks for
malicious changes when signing gives you reliable protection.  An
attacker could always replace the manifest too.

m