From mboxrd@z Thu Jan 1 00:00:00 1970 From: Greg Troxel Subject: org-mobile-use-encryption Date: Tue, 12 Oct 2010 20:23:42 -0400 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1329773147==" Return-path: Received: from [140.186.70.92] (port=38476 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1P5p8D-00083V-RV for emacs-orgmode@gnu.org; Tue, 12 Oct 2010 20:23:46 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1P5p8C-0001pJ-2n for emacs-orgmode@gnu.org; Tue, 12 Oct 2010 20:23:45 -0400 Received: from fnord.ir.bbn.com ([192.1.100.210]:62530) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1P5p8C-0001p0-0q for emacs-orgmode@gnu.org; Tue, 12 Oct 2010 20:23:44 -0400 List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org Errors-To: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org To: emacs-orgmode@gnu.org --===============1329773147== Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" --=-=-= Content-Type: text/plain I am trying to test encryption for MobileOrg via a beta from Richard. (We're still playing the 'convince itunes to let you run code on your own phone game', so this report is preliminary about what Org itself is doing.) I have in .emacs-local.el: (setq org-mobile-use-encryption t) (setq org-mobile-encryption-password "mypasswd") and I did org-mobile-push. I found that there was an old agendas.org that was not encrypted, and it seems that org-mobile-push omits agendas.org if org-mobile-use-encryption is t, but still creates it when nil. checksums.dat is in cleartext. This seems ok, but could be a missed opportunity for some integrity protection. index.org is in cleartext. The list of file names is of course in the webdav area, and that seems not a big deal, but it also contains the TODO keyword plan, priority tag list, etc. I'm not sure this level of paranoia is warranted, but typical encrypting filesystems also encrypt the filenames. It probably suffices to just warn the user that the filenames of org files will still be exposed in the DAV area. --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (NetBSD) iEYEARECAAYFAky0/A4ACgkQ+vesoDJhHiW36wCffM46HDcXMn7pIfhgWRMBLZrp 968AnRL90uocHhkH+7W5BC4KlvndHyWF =z5FS -----END PGP SIGNATURE----- --=-=-=-- --===============1329773147== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Emacs-orgmode mailing list Please use `Reply All' to send replies to the list. Emacs-orgmode@gnu.org http://lists.gnu.org/mailman/listinfo/emacs-orgmode --===============1329773147==--