Hello!

Now that 2.5.0b2 seems to run pretty stable, I'd like to try the new
encryption functionality.  I've read wiki.zmanda.com/index.php/Encryption,
but have still some questions:

- What is the point to uuencode and encrypt (with gpg) random data to
  generate the key?  Since the passphrase is stored on the same host,
  protecting the key with the passprase is not of much use (IMHO).

- Why using aespipe at all?  Is there any reason not to use gpg?
  AFAICS, aespipe introduces only an additinal layer of complexity.

- Since the server says whether/which encryption is to be used, the
  server can request unencrypted backups from the client.  This
  implies that the server has to be trusted.

Comments?