Download backups via SSH / WebUI: Different checksums

Configuration
1

Hi all,

As I want to make HA to my central home control device, it has to be super reliable and easy replaceable if something fails. So backups are very important to me and I want to make sure, that I don’t make a mistake there.

Why does the checksum of downloaded Backup differ from the backup file in the internal storage? SHA256 sums of the same backup:

Downloaded via regular web UI:
45618689673001459591B9561E3D0A03F6CCB2EFD66818D185110123005B0523

Downloaded via SSH and checked on PC:
61E892B8FE3EC86D5BBE6F538B045893775687D807A9C537817140F69AE03543

Checked via SSH terminal via sha256sum directly on HA without downloading:
61e892b8fe3ec86d5bbe6f538b045893775687d807a9c537817140f69ae03543 (identical to SSH-Download)

All three files have the exact same file size: 12328960 bytes.

Why does the checksum of the WebUI download differ from the other two? Does HA do any important magic while downloading via WebUI?

2

Yes it does.

When downloading from the UI the backup is decrypted automatically before download.

3

Thanks for this information and can confirm that. It is nowhere mentioned, that the backup gets decrypted while downloading, right.

Is this not super dangerous? If people assume, the backup is encryped and maybe save backups on a public / less secure storage, than they would do otherwise:

image
image718×157 11 KB

4

Decrypting when downloading from the UI is extremely useful and make reverting small YAML changes a lot easier. This was basically why it was introduced.