@@ -81,7 +81,7 @@ Major new features
8181 rclone:, and s3:/b2: backends.
8282 Borgstore backends are easy to implement, so there might be even more in
8383 the future.
84- - Borg uses these to implement file:, rest :, https:, sftp:, s3: / b2: and
84+ - Borg uses these to implement file:, ssh :, https:, sftp:, s3: / b2: and
8585 rclone: repositories. Via rclone, all sorts of cloud repositories can be used!
8686 - Remote repositories (ssh flavour) are implemented as REST-over-stdio-over-ssh,
8787 so we can get rid of the old RPC-over-stdio-over-ssh method.
@@ -92,6 +92,8 @@ Major new features
9292 - Stale repository locks get auto-removed if they don't get refreshed or if
9393 their owner process is known dead.
9494 - Borg delete and prune are much faster now.
95+ - Repository index, cache, locks are encrypted/authenticated.
96+ - Stores defaults (e.g. compression and chunker params) in the repository.
9597 - The repository works very differently now:
9698
9799 - borg 1.x: transaction-based (commit or roll back), log-like, append-only
@@ -132,19 +134,22 @@ Major new features
132134
133135 - New keys/repos only use new crypto: AEAD, AES-OCB, ChaCha20-Poly1305,
134136 Argon2.
137+ - Remove the "none" mode (no encryption, no authentication). Use the
138+ authenticated modes instead.
135139 - Using session keys: more secure and easier to manage, especially in multi-
136140 client or multi-repo contexts. By doing this, we could get rid of problematic
137141 long-term nonce/counter management.
138142 - borg keys:
139143
140144 - locate the key automatically in the key directory or in the repository
141145 - support multiple borg keys per repository
146+ - document how to use hardware protected keys (with "age" or YubiKey directly).
142147 - The super-fast blake3 algorithm replaces blake2b for new repos.
143148 - The old crypto code will be removed in Borg 2.1 (currently we still need
144149 it to read from your old Borg 1.x repositories). Removing AES-CTR, PBKDF2,
145150 blake2b, encrypt-and-mac, counter/nonce management will make Borg more secure,
146151 easier to use and develop.
147- - New none-* and authenticated-* modes with better authentication/checksumming.
152+ - New authenticated-* modes with better authentication/checksumming.
148153
149154- chunker improvements
150155
@@ -164,8 +169,7 @@ Major new features
164169
165170- borg cockpit: full-screen console-based status display (experimental)
166171
167- - borg mount: added a new implementation based on mfusepy, compatible with
168- fuse2 and 3 (experimental)
172+ - borg mount: added implementations based on mfusepy and WinFSP (experimental).
169173- borg mount: expose POSIX ACLs on Linux mounts (not enforced)
170174
171175- borg webdav: serve archives via WebDAV / HTTP, including PAX tar downloads.
@@ -177,7 +181,7 @@ Major new features
177181 - remote repository URLs default to relative paths, using an absolute path
178182 is possible.
179183 - no longer supports SCP-style repo parameters (parsing ambiguity issues; no
180- :port possible); just use rest ://user@host:port/path.
184+ :port possible); just use ssh ://user@host:port/path.
181185 - Separated repo and archive; no "::" anymore
182186 - Split some commands that worked on archives and repositories into two separate
183187 commands (makes the code/docs/help easier).
0 commit comments