Backup encryption using a public key

[Wolfgangthegreat]

Hello,

Currently the manual backup encryption is using a password the user needs to submit to the device, which is not so friendly and somewhat less secure, since browsers are multi-purpose and has plugins/addons that at times discovered as malicious.

So, I thought - why not do this encryption using a public key?
It can use the current users mechanism, as a user object can store a public key value, currently for SSH access authentication, but it can also be used to encrypt and sign the backup. One can even create a special user just for the goal of backup.

I guess this method can also be applied to the scheduled backup to the pfSense cloud, the "Auto Config Backup" feature.

Is there a plan for such a feature?

[stephenw10]

Nothing I'm aware of. I quite like the idea though. Open a feature request.

Steve

[Wolfgangthegreat]

Hi @stephenw10 , glad you liked it!
I Opened a feature request at https://redmine.pfsense.org/issues/14923