Re: org-mobile-use-encryption

[Carsten Dominik <carsten.dominik@gmail.com>]

On Oct 13, 2010, at 2:23 AM, Greg Troxel wrote:

>
> I am trying to test encryption for MobileOrg via a beta from Richard.
> (We're still playing the 'convince itunes to let you run code on your
> own phone game', so this report is preliminary about what Org itself  
> is
> doing.)
>
> I have in .emacs-local.el:
>
> (setq org-mobile-use-encryption t)
> (setq org-mobile-encryption-password "mypasswd")
>
> and I did org-mobile-push.  I found that there was an old agendas.org
> that was not encrypted, and it seems that org-mobile-push omits
> agendas.org if org-mobile-use-encryption is t, but still creates it  
> when
> nil.

I have not been able to reproduce this.

>
> checksums.dat is in cleartext.  This seems ok, but could be a missed
> opportunity for some integrity protection.

I have a technical reason to not encrypt it - so unless there is  
someone who really needs it encrypted, I want to keep it like this.

> index.org is in cleartext.  The list of file names is of course in the
> webdav area, and that seems not a big deal, but it also contains the
> TODO keyword plan, priority tag list, etc.

This is a good observation.  And who knows what other information we  
will eventually put into that file.  So I am switching to encrypting  
this file as well.

>
> I'm not sure this level of paranoia is warranted, but typical  
> encrypting
> filesystems also encrypt the filenames.  It probably suffices to just
> warn the user that the filenames of org files will still be exposed in
> the DAV area.

I have just put this information into the manual.

Thanks

- Carsten


>
>
>
> _______________________________________________
> Emacs-orgmode mailing list
> Please use `Reply All' to send replies to the list.
> Emacs-orgmode@gnu.org
> http://lists.gnu.org/mailman/listinfo/emacs-orgmode