Encrypted Backup Shootout
Having dealt with this at some scale.<p>Simplicity is everything. Skip the encryption - seriously. Or do what Microsoft does and send the keys somewhere you can absolutely get them (bitkeeper can be forced to backup into AD).<p>You want good access control and fantastic ability to recover. Your transfer will be over a secure link.<p>I did the client side encryption. I'm not convinced it's worth it or I have secrets so important that I need to worry about someone at AWS reading my S3 bucket (which has its own encryption).