[ilyt]

How tarsnap keeps backups readonly ? Just having service being a barrier is not enough

[catiopatio]

It supports distinct authentication keys with read, write, and/or delete permissions for the same data protected by a given encryption key.

Those restrictions are enforced by the service.

[ilyt]

So one bug and it is gone.

Thought it used readonly features of S3/Glacier or something..