We now have TLS. Data is still transmitted unencrypted by default, but add

links to the Encryption documentation.

diff --git a/docs/manual/security.tex b/docs/manual/security.tex
index e6ff7ea0be40bdfa5d82c873afe8a8c4d9a807ab..e1dbd8af207f2b6639a58085ab381321f00e7c36 100644 (file)
--- a/docs/manual/security.tex
+++ b/docs/manual/security.tex
@@ -27,10 +27,10 @@
 \item If you are using the recommended ports 9101, 9102, and 9103, you  will
    probably want to protect these ports from external access  using a firewall
    and/or using tcp wrappers ({\bf etc/hosts.allow}).  
-\item Currently all data that is sent across the network is unencrypted.  As a
-   consequence, unless you use {\bf ssh} or {\bf stunnel} for  port forwarding,
-   it is not recommended to do a backup across an  insecure network (e.g. the
-   Internet). In a future version, we plan  to have {\bf ssl} encryption
+\item By default, all data that is sent across the network is unencrypted.
+   However, Bacula does support TLS (transport layer security) and can
+   encrypt transmitted data.  Please read \ilink{Data Encryption}{DataEncryption}
+   section of this manual.
    built-in. 
 \item You should ensure that the Bacula working directories are  readable and
    writable only by the Bacula daemons.