I have to back up some data from windows 7 machines over the internet, and I rarely use windows so am distrustful of it in general. Specifically:
- Is there any sort of check that the server is the same as it was last time, so you have some assurance you are not being MITM attacked, before giving authentication information?
- Is authentication information (e.g., passwords) sent in plaintext to eavesdroppers (ala telnet/ftp)?
- Is the data sent in plaintext to eavesdroppers?
- If I only setup a read-only share for one user (who has no other permissions), have I opened myself up to any other security holes?
This isn't high security stuff -- just backup of routine small business data (should not contain billing/financial/confidential stuff, though cannot guarantee), but I'm trying to see if I need to setup a VPN or choose try running rsync under windows.