Register FAQ / Rules Forum Spy Search Today's Posts Mark Forums Read
Go Back   MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Reply
 
Thread Tools Search this Thread Display Modes
Old Jun 29, 2012, 03:18 PM   #1
jackhdev
macrumors 6502
 
Join Date: Apr 2011
Location: Bismarck, North Dakota
AFP over Internet?

I have a Time Capsule at my house and an iMac at my office. I am able to successfully back up the iMac to the Time Capsule through AFP using Carbon Copy Cloner.

Here's my question: how secure is this? The backup is to an encrypted disk image. This being so (and the disk image has to be mounted on the iMac first), does this make the traffic encrypted? Second, are the login credentials sent in plain text?

Thanks.
jackhdev is offline   1 Reply With Quote
Old Jun 29, 2012, 06:57 PM   #2
MisterMe
macrumors G4
 
Join Date: Jul 2002
Location: USA
As I understand you, you are sending clear data to an encrypted image. Your data will not be encrypted until it reaches its destination. Anyone with the ability to intercept it will be able to read it.
__________________
Neither a borrower nor a lender be
For loan oft loses both itself and friend
William Shakespeare from Hamlet
MisterMe is offline   -2 Reply With Quote
Old Jun 29, 2012, 07:20 PM   #3
jackhdev
Thread Starter
macrumors 6502
 
Join Date: Apr 2011
Location: Bismarck, North Dakota
Quote:
Originally Posted by MisterMe View Post
As I understand you, you are sending clear data to an encrypted image. Your data will not be encrypted until it reaches its destination. Anyone with the ability to intercept it will be able to read it.
Nah, I looked around and found that the data is encrypted because the DMG is (and the DMG is mounted on the iMac). http://www.cqwen.com/encrypted-disk-...ransport-data/

Am I right to assume that the AFP login credentials are sent in plain text?
jackhdev is offline   0 Reply With Quote
Old Jun 30, 2012, 10:52 AM   #4
MisterMe
macrumors G4
 
Join Date: Jul 2002
Location: USA
You have to be clear about what you are doing. If you are sending an encrypted disc image en masse, then of course the data are encrypted because the image in encrypted at its source. This is not what you said. You said that you were sending data to an encrypted image. In that case, the data are not encrypted until they are archived by the Time Capsule.

So which is it? Are you sending individual files to an encrypted image of Time Capsule or are you sending an encrypted image to the Time Capsule?
__________________
Neither a borrower nor a lender be
For loan oft loses both itself and friend
William Shakespeare from Hamlet
MisterMe is offline   -1 Reply With Quote
Old Jun 30, 2012, 12:20 PM   #5
jackhdev
Thread Starter
macrumors 6502
 
Join Date: Apr 2011
Location: Bismarck, North Dakota
I am sending the files to an encrypted disk image on the Time Capsule. Carbon Copy Cloner connects to the Time Capsule over the Internet, mounts the encrypted disk image (located on the Time Capsule), and then copies the individual updated files over. I looked it up and it appears that sending files to an encrypted disk image encrypts the traffic as well.

Do you know anything about the username and password though? Are those encrypted? Is AFP secure/not secure on a network if you are just logging in (i.e. no Kerberos)? Thanks for your help.
jackhdev is offline   0 Reply With Quote
Old Jul 1, 2012, 12:31 AM   #6
MisterMe
macrumors G4
 
Join Date: Jul 2002
Location: USA
Clearly your data stream is not encrypted. As for your credentials, Apple has very good credentials encryption. Your may expect your Time Capsule user name and password to be secure.
__________________
Neither a borrower nor a lender be
For loan oft loses both itself and friend
William Shakespeare from Hamlet
MisterMe is offline   0 Reply With Quote
Old Jul 1, 2012, 07:55 AM   #7
Alrescha
macrumors 65816
 
Join Date: Jan 2008
Location: Boston, MA
Quote:
Originally Posted by MisterMe View Post
Clearly your data stream is not encrypted.
Clearly it is.

He's mounting the encrypted disk image from the remote computer. The only thing getting transmitted over the Internet is the encrypted version of the disk image. The Time Capsule certainly isn't doing the encryption - the remote iMac is.

A.
Alrescha is offline   1 Reply With Quote
Old Jul 1, 2012, 12:18 PM   #8
Supa_Fly
macrumors 68030
 
Supa_Fly's Avatar
 
Join Date: May 2002
Location: Toronto, Ontario, Canada
Send a message via MSN to Supa_Fly
I'm curious ... and sorry to hijack this thread, can this (backup over internet) be done without the need for CCC? Can this be done via TimeMachine??
__________________
2008 Al_MB 2.4Ghz C2D 4GB/256GB HDD/256MB Nvidia 9400M| Panther Dog Tags | Z10 | 2010 Mac Switcher
Supa_Fly is offline   0 Reply With Quote
Old Jul 1, 2012, 01:41 PM   #9
jackhdev
Thread Starter
macrumors 6502
 
Join Date: Apr 2011
Location: Bismarck, North Dakota
Quote:
Originally Posted by Prom1 View Post
I'm curious ... and sorry to hijack this thread, can this (backup over internet) be done without the need for CCC? Can this be done via TimeMachine??
You should be able to, though you would have to mount the share point on the computer first (because Time Machine uses bonjour to find a place to backup, and this does not work over the Internet; you need to help it). You would also have to set up a script to run every hour or so to make sure that the share point is still mounted (though once you tell Time Machine where you are backing up to, it may be able to mount the disk automatically).

My computer at work is running Mac OS X Server, so I automatically use CCC. Time Machine is not meant for servers and does not back up everything.
jackhdev is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > OS X > Mac OS X Server, Xserve, and Networking

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Synology NAS and OS X AFP bedifferent Mac Peripherals 6 Aug 20, 2013 08:01 PM
Test AFP speed mus0r Mac OS X Server, Xserve, and Networking 3 Feb 7, 2013 06:22 PM
AFP, CIFS and ReadyNAS DeafRaiders Mac Basics and Help 0 Jan 13, 2013 08:56 AM
AFP Encryption - 10.8 vs 10.6 Butler Trumpet Mac Programming 0 Dec 17, 2012 04:19 PM
AE CS6 and ML over AFP mBox Digital Video 0 Aug 23, 2012 06:53 PM

Forum Jump

All times are GMT -5. The time now is 07:03 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC