Output of restic version

restic 0.9.2 compiled with go1.11 on linux/amd64

How did you run restic exactly?

restic -r /repo init

What backend/server/service did you use to store the repository?

local

Expected behavior

Keys should contain no plaintext information (apart from salt, iteration, ...).

Actual behavior

Keys contain host name, username, and time of creation in plaintext.

Do you have any idea what may have caused this?

Restic stores key metadata unencrypted.

Do you have an idea how to solve the issue?

Store key metadata encrypted. We could update the key format by adding e.g. a hostname_enc field and blanking the hostname field for new repos. Then old clients would show empty metadata until they are updated. We should also migrate existing keys to remove potentially old plaintext metadata from existing repos.