Not-fully-trusted remote - how?

[TauriRed]

hi,
my current configuration:
- local Proxmox VE + some backups via proxmox-backup-client
- Local Proxmox Backup Server. Backups doesn't use encryption because this (as far as I understood docs at https://pbs-inari6.viorsan.com:8007/docs/technical-overview.html#verification-of-encrypted-chunks ) will cause issues with verification

I want to also add offsite backup, I find hosting provider I like but I'm not fully sure I should trust them with security of my data (I would prefer not to say why).
Is it possible to make sync backups from local server to remote but encrypt them in process?
Or I should enable encryption and re-do all backups?

 

[Dunuin]

Is it possible to make sync backups from local server to remote but encrypt them in process?
Or I should enable encryption and re-do all backups?

I don't think that such a thing is implemented yet. Keep in mind that the PVE/proxmox-backup-client is doing the encryption/decryption on the PVE node. So way to go would be to encrypt all backups.
For protection against bit rot you could use ZFS pools, as then verification would be done on the block level.