emacs-orgmode@gnu.org archives
 help / color / mirror / code / Atom feed
From: Greg Troxel <gdt@ir.bbn.com>
To: emacs-orgmode@gnu.org
Subject: org-mobile-use-encryption
Date: Tue, 12 Oct 2010 20:23:42 -0400	[thread overview]
Message-ID: <rmi62x70wkx.fsf@fnord.ir.bbn.com> (raw)


[-- Attachment #1.1: Type: text/plain, Size: 1077 bytes --]


I am trying to test encryption for MobileOrg via a beta from Richard.
(We're still playing the 'convince itunes to let you run code on your
own phone game', so this report is preliminary about what Org itself is
doing.)

I have in .emacs-local.el:

(setq org-mobile-use-encryption t)
(setq org-mobile-encryption-password "mypasswd")

and I did org-mobile-push.  I found that there was an old agendas.org
that was not encrypted, and it seems that org-mobile-push omits
agendas.org if org-mobile-use-encryption is t, but still creates it when
nil.

checksums.dat is in cleartext.  This seems ok, but could be a missed
opportunity for some integrity protection.

index.org is in cleartext.  The list of file names is of course in the
webdav area, and that seems not a big deal, but it also contains the
TODO keyword plan, priority tag list, etc.


I'm not sure this level of paranoia is warranted, but typical encrypting
filesystems also encrypt the filenames.  It probably suffices to just
warn the user that the filenames of org files will still be exposed in
the DAV area.




[-- Attachment #1.2: Type: application/pgp-signature, Size: 194 bytes --]

[-- Attachment #2: Type: text/plain, Size: 201 bytes --]

_______________________________________________
Emacs-orgmode mailing list
Please use `Reply All' to send replies to the list.
Emacs-orgmode@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-orgmode

             reply	other threads:[~2010-10-13  0:23 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-10-13  0:23 Greg Troxel [this message]
2010-10-13  8:59 ` org-mobile-use-encryption Carsten Dominik
2010-10-13 12:48   ` org-mobile-use-encryption Greg Troxel
2010-10-14  6:31     ` org-mobile-use-encryption Carsten Dominik
2010-10-15  0:07       ` org-mobile-use-encryption Greg Troxel
2010-10-13 14:02   ` org-mobile-use-encryption Andreas Röhler
2010-10-14  6:40     ` org-mobile-use-encryption Carsten Dominik

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

  List information: https://www.orgmode.org/

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=rmi62x70wkx.fsf@fnord.ir.bbn.com \
    --to=gdt@ir.bbn.com \
    --cc=emacs-orgmode@gnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs/org-mode.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).