title: How much is in-secure to use rsync in daemon mode without ssh
body: <p>As we know we can use rsync via ssh to send files between computers especially in different network (e.g Internet) to have some secure transfers. (thats right and we all agree with it)</p>
  
  <p>and as we know also rsync does not provide any security while transferring data using normal way therefore we use ssh as cover.</p>
  
  <p>So the idea!.</p>
  
  <p>If we use rsync in daemon mode (on the linux backup server located in England for example) and we start backing up the data from linux computers (from France for example) using the internet line without using ssh (just use the normal rsync daemon option)</p>
  
  <p>example:</p>
  
  <pre><code>rsync -vazi --progress source rsync://user@england-server.example.com/somefolder/
  </code></pre>
  
  <p>So the question is</p>
  
  <p>do you think this is a secure way?</p>
  
  <p>if not , is there any one  can know what we are transferring and what the content of the files we are transferring?.</p>
  
  <p>also is there chance to catch the password which we entered when rsync prompt for the rsync user password?</p>
  
  <p>I know that using ssh or stunnel  is more secure. but really i want to know more about why is it in-secure while using the normal way especially when we are rsync data between computers  over the Internet.</p>
  
  <p>and Thanks for any answers.</p>