Encrypting files for org-mobile

Encrypting files for org-mobile

[D M German]

Hi everybody,

Does anybody know if it is possible to keep the files for org-mobile
encrypted in the server? I know you can protect them with a password,
but that protection is from people who look into the server. How about
protecting it from the people who run the server?

thanks a lot!
-- 
--
Daniel M. German                  
http://turingmachine.org/
http://silvernegative.com/
dmg (at) uvic (dot) ca
replace (at) with @ and (dot) with .

Re: Encrypting files for org-mobile

[Richard Moreland]

[-- Attachment #1.1: Type: text/plain, Size: 1271 bytes --]

Hi Daniel,

There is no support for this in MobileOrg yet, but it has resided on my todo
list for a while.

Do you currently use any encryption on your local Org-files in Emacs?  I've
been meaning to examine AutoEncryption or CryptPlusPlus (
http://www.emacswiki.org/emacs/CategoryCryptography) to see how it plays
with Org.  If it worked well, my rough plan was to make MobileOrg able to
en/decrypt files along those lines.

If anyone has any better ideas, let me know.  I'm not sure how this would
best be implemented.

-Richard

On Tue, Dec 29, 2009 at 4:04 AM, D M German <dmg@uvic.ca> wrote:

>
> Hi everybody,
>
> Does anybody know if it is possible to keep the files for org-mobile
> encrypted in the server? I know you can protect them with a password,
> but that protection is from people who look into the server. How about
> protecting it from the people who run the server?
>
> thanks a lot!
> --
> --
> Daniel M. German
> http://turingmachine.org/
> http://silvernegative.com/
> dmg (at) uvic (dot) ca
> replace (at) with @ and (dot) with .
>
>
> _______________________________________________
> Emacs-orgmode mailing list
> Please use `Reply All' to send replies to the list.
> Emacs-orgmode@gnu.org
> http://lists.gnu.org/mailman/listinfo/emacs-orgmode
>

[-- Attachment #1.2: Type: text/html, Size: 1935 bytes --]

[-- Attachment #2: Type: text/plain, Size: 201 bytes --]

_______________________________________________
Emacs-orgmode mailing list
Please use `Reply All' to send replies to the list.
Emacs-orgmode@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-orgmode

Re: Encrypting files for org-mobile

[Benjamin Andresen]

Richard Moreland <rlm@ncogni.to> writes:

> Hi Daniel,
>
> There is no support for this in MobileOrg yet, but it has resided on my todo
> list for a while.
>
> Do you currently use any encryption on your local Org-files in Emacs?  I've
> been meaning to examine AutoEncryption or CryptPlusPlus (
> http://www.emacswiki.org/emacs/CategoryCryptography) to see how it plays
> with Org.  If it worked well, my rough plan was to make MobileOrg able to
> en/decrypt files along those lines.
>
> If anyone has any better ideas, let me know.  I'm not sure how this would
> best be implemented.

I don't know about a better idea, but I use EasyPG. (info "(epa)Overview")

It works well with org and the interface is very easy to use.
(C-x C-w filename.gpg, and select whom to encrypt to from your keyring)

It's also part of upstream Emacs and uses GnuPG.

>
> -Richard

br,
benny

Re: Encrypting files for org-mobile

[Bernt Hansen]

Richard Moreland <rlm@ncogni.to> writes:

> On Tue, Dec 29, 2009 at 4:04 AM, D M German <dmg@uvic.ca> wrote:
>
>     Hi everybody,
>    
>     Does anybody know if it is possible to keep the files for
>     org-mobile encrypted in the server? I know you can protect them
>     with a password, but that protection is from people who look into
>     the server. How about protecting it from the people who run the
>     server?
>    
>     thanks a lot!
>     --
>     --
>     Daniel M. German
>     http://turingmachine.org/
>     http://silvernegative.com/
>     dmg (at) uvic (dot) ca
>     replace (at) with @ and (dot) with .
>
> Hi Daniel,
>
> There is no support for this in MobileOrg yet, but it has resided on
> my todo list for a while.
>
> Do you currently use any encryption on your local Org-files in Emacs? 
> I've been meaning to examine AutoEncryption or CryptPlusPlus
> (http://www.emacswiki.org/emacs/CategoryCryptography) to see how it
> plays with Org.  If it worked well, my rough plan was to make
> MobileOrg able to en/decrypt files along those lines.
>
> If anyone has any better ideas, let me know.  I'm not sure how this
> would best be implemented.
>
> -Richard
>

Hi Richard,  I don't currently use MobileOrg but I do use encryption
with org-mode as described here:

http://doc.norang.ca/org-mode.html#HandlingEncryption

Regards,
Bernt

Re: Encrypting files for org-mobile

[D M German]

Hi Richard,

 Richard> Hi Daniel,
 Richard> There is no support for this in MobileOrg yet, but it has resided on my todo list for a while.

 Richard> Do you currently use any encryption on your local Org-files in Emacs?  I've been meaning to examine AutoEncryption or CryptPlusPlus (http://
 Richard> www.emacswiki.org/emacs/CategoryCryptography) to see how it plays with Org.  If it worked well, my rough plan was to make MobileOrg able to en/
 Richard> decrypt files along those lines.

 Richard> If anyone has any better ideas, let me know.  I'm not sure how this would best be implemented.

I think there are two use cases for this problem. 

* On one side is the people who work with encrypted files. the
  mobile-org application would need to be aware of the type of
  encryption used. I suspect many people would be willing to change
  encryption method to the one used in org if it was "good enough".

* On the other there is the people who are only interested in encrypting
  the files in the server to avoid them to be browsed by unwanted
  eyes. I suspect that even a simple symmetric encryption method will be
  sufficient here for the majority of the users.

these two uses cases are not mutually exclusive. One can imagine an
scenario where only one or more files are encrypted at the client level,
but the user wants all the files uploaded to the server to be made
available in encrypted mode at the file system level on the server.

Which get me thinking... is there a way to decrypt the files on the file
at the server as they are requested by the mobile-org client? In other
words, the files are encrypted in the server, but when the user requests
them (and provides the proper credentials---such as in the current
environment) the files are then decrypted on the file before they are
sent to the iphone. I suspect this is probably implemented somehow.

I have an iphone development environment (no dev. license though) and I
learning objective-C. I am not very good at UI, but I can help with the
backend code, if necessary.


--dmg

 Richard> -Richard

 Richard> On Tue, Dec 29, 2009 at 4:04 AM, D M German <dmg@uvic.ca> wrote:

    Hi everybody,
   
    Does anybody know if it is possible to keep the files for org-mobile
    encrypted in the server? I know you can protect them with a password,
    but that protection is from people who look into the server. How about
    protecting it from the people who run the server?
   
    thanks a lot!
    --
    --
    Daniel M. German
    http://turingmachine.org/
    http://silvernegative.com/
    dmg (at) uvic (dot) ca
    replace (at) with @ and (dot) with .

    _______________________________________________
    Emacs-orgmode mailing list
    Please use `Reply All' to send replies to the list.
    Emacs-orgmode@gnu.org
    http://lists.gnu.org/mailman/listinfo/emacs-orgmode


-- 
--
Daniel M. German                  
http://turingmachine.org/
http://silvernegative.com/
dmg (at) uvic (dot) ca
replace (at) with @ and (dot) with .

Re: Encrypting files for org-mobile

[D M German]

 Bernt Hansen twisted the bytes to say:


 Bernt> Hi Richard,  I don't currently use MobileOrg but I do use encryption
 Bernt> with org-mode as described here:

 Bernt> http://doc.norang.ca/org-mode.html#HandlingEncryption

 Bernt> Regards,
 Bernt> Bernt

Thanks Bernt, for calling my attention to this feature. It certainly
works as a way to avoid my most important data to be "server"
readable. I'll give it a try.

--dmg




-- 
--
Daniel M. German                  
http://turingmachine.org/
http://silvernegative.com/
dmg (at) uvic (dot) ca
replace (at) with @ and (dot) with .