Encryption in Transit

[thehammer]

Hello,

I have a couple questions about a Proxmox Virtual Environment (PVE) connected to a Proxmox Backup Server (PBS).

If the following setting is set to "Do not encrypt backups"...



Then...

1) Is the data that is sent from PVE to PBS still encrypted in Transit?

If yes to 1...

2) Has anyone verified/tested if a man-in-the-middle (MITM) attack is noticed by either PVE or PBS? i.e. are certificate warnings thrown? e.g. If I installed valid ACME certificates on both PVE and PBS are those the same ACME certificates used to encrypt the connection when PVE sends the user credentials to PBS?

Thanks in advance!

 

[fireon]

1) Is the data that is sent from PVE to PBS still encrypted in Transit?

Yes. Port 8007 with TLS.

Has anyone verified/tested if a man-in-the-middle (MITM) attack is noticed by either PVE or PBS? i.e. are certificate warnings thrown?

Not yet. Someone who has already tested this will surely get in touch here. Otherwise, there are also 2 Fakter auth. ACL's and APIuser.

If I installed valid ACME certificates on both PVE and PBS are those the same ACME certificates used to encrypt the connection when PVE sends the user credentials to PBS?

Yes.