rsync.net gives you an empty unix filesystem to do what you like with.

Since it runs over SSH (and since we deprecated webdav years ago) it is certainly encrypted over the wire.

If you would like it encrypted at rest, on our side, you should use attic or borg. borg appears to be the most popular:

http://www.stavros.io/posts/holy-grail-backups/

We just enabled our support for attic and borg and are very excited about it.

It's not the same, obviously, but one thing you could do is redirect "zfs snapshot" to a file (instead of passing it to "|zfs send"), encrypt that locally (using whatever means you prefer: openssl, gpg, etc.) and then upload that.

Of course, tarsnap pretty much does that all by itself and does it quite well.

I don't think this is what you need. This is a base file diff and transfer system - you have to add encryption on top of it yourself.

Or you use a different tool like tarsnap that can be built on top of this.

It runs over SSH, so yes.

What about on the server side? For the storage.

If you want server-side encryption, then Tarsnap is probably better for you.

Yes I use Tarsnap but an encrypted backup using file system snapshots would be the best thing ever.

One way that you can do this is just to zfs replicate a volume to another system that has an encrypted zfs mount. Probably not what you are looking for, but voila - end to end snapshotted encryption - except it's not a "backup", more like a hot failover volume.

So just take a ZFS snapshot and give Tarsnap the snapshot to back it up?