Re: org-crypt.el security problem (From: Milan Zamazal)

[Bastien <bzg@altern.org>]

Hi Julien,

Julien Danjou <julien@danjou.info> writes:

> On Fri, Mar 04 2011, Peter Jones wrote:
>
>> Hopefully there's an autosave hook where you can encrypt the headings
>> and save to disk using a temporary buffer without having to alter the
>> current buffer and interrupt the user by encrypting a heading that is
>> being edited.
>
> I've recently added caching of encrypted text, so that org-crypt will
> not recrypt the text once again if it has not been modified, but reuse
> the previous crypting value.

I've seen org-encrypt-string but I don't see we could use it for the 
problem at hand.  

Also, the purpose is to encrypt the auto-saved buffer and *not* the
visited buffer -- which I don't know how to do.  

> That could be used to automagically re-encrypt all text before
> auto-saving.

Please let us know if you can think of a better fix than the warning!

Thanks,

-- 
 Bastien