Re: [Duplicity-talk] No secret key required on differential backups

[Gabriel Ambuehl]

On 28.2.10 Lluís Batlle wrote:
> Hello,
> 
> I've noticed that duplicity does not require me the GPG passphrase for
> the secret key when doing a differential backup, but it requires the
> passphrase for a 'verify'. From the latter I see that my files are
> properly encrypted.
> 
> Nevertheless, how come duplicity can do a differential backup without
> being able to decrypt what has already been backed up? Are the files
> metadata (names, timestamps, sizes, ...) stored without encryption?
> 
>
The meta data is cached on the local machine unencrypted (to save traffic and 
allow for unattended backups without a saved passphrase). If you delete the 
.cache files, it will have to redownload and and encrypt them and will ask for 
the password. Simple as that :)