Revert "Fix encrypt/decrypt in presence of arbitrary drawers"

Revert "Fix encrypt/decrypt in presence of arbitrary drawers"

[Nicolas Goaziou]

Hello,

I suggest to revert commit c93983613dc9bba88f39f81b06a9813060a4599a from
maint and master branch.

By using (org-end-of-meta-data t), _any_ drawer at the beginning of the
entry is left in clear text. This includes personal drawers you would
like to hide. E.g.,

--8<---------------cut here---------------start------------->8---
* Test                                                                     :crypt:

:SECRET:
It's a secret to everyone.
:END:

This is hidden.

# Local Variables:
# org-crypt-key: nil
# End:
--8<---------------cut here---------------end--------------->8---

Since such data is never needed for encryption, I suggest to stay on the
safe side and encrypt anything below the properties drawer.

Regards,
-- 
Nicolas Goaziou

Re: Revert "Fix encrypt/decrypt in presence of arbitrary drawers"

[Bastien]

Hi Nicolas,

Nicolas Goaziou <mail@nicolasgoaziou.fr> writes:

> I suggest to revert commit c93983613dc9bba88f39f81b06a9813060a4599a from
> maint and master branch.

I pushed a fix in master (755367f36) that should prevent the problem
you are pointing too while fixing the problem the OP reported.

Thanks for reporting this potential issue!

-- 
 Bastien

Re: Revert "Fix encrypt/decrypt in presence of arbitrary drawers"

[Nicolas Goaziou]

Hello,

Bastien <bzg@gnu.org> writes:

> I pushed a fix in master (755367f36) that should prevent the problem
> you are pointing too while fixing the problem the OP reported.

I think this is still sub-optimal.

`org-logbook-drawer-re' doesn't mean much, because it hard-codes
"LOGBOOK" whereas `org-log-into-drawer' could have an entire different
value, including nil. As long as users can add log notes elsewhere than
into "LOGBOOK" drawer, the check you implemented will not work reliably.

I think encrypted entries should be considered as read-only. You should
not be able to reschedule them, or add a note, as long as
`org-at-encrypted-entry-p' is non-nil. I don't think you can handle the
initial problem otherwise.

Regards,
-- 
Nicolas Goaziou