From mboxrd@z Thu Jan 1 00:00:00 1970 From: Carsten Dominik Subject: Re: org-mobile-use-encryption Date: Wed, 13 Oct 2010 10:59:43 +0200 Message-ID: References: Mime-Version: 1.0 (Apple Message framework v936) Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Return-path: Received: from [140.186.70.92] (port=33826 helo=eggs.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1P601a-0006H8-As for emacs-orgmode@gnu.org; Wed, 13 Oct 2010 08:01:46 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1P5xBy-0006xF-MS for emacs-orgmode@gnu.org; Wed, 13 Oct 2010 05:00:11 -0400 Received: from mail-ew0-f41.google.com ([209.85.215.41]:47918) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1P5xBy-0006x9-I4 for emacs-orgmode@gnu.org; Wed, 13 Oct 2010 05:00:10 -0400 Received: by ewy5 with SMTP id 5so1679092ewy.0 for ; Wed, 13 Oct 2010 02:00:09 -0700 (PDT) In-Reply-To: List-Id: "General discussions about Org-mode." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org Errors-To: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org To: Greg Troxel Cc: emacs-orgmode@gnu.org On Oct 13, 2010, at 2:23 AM, Greg Troxel wrote: > > I am trying to test encryption for MobileOrg via a beta from Richard. > (We're still playing the 'convince itunes to let you run code on your > own phone game', so this report is preliminary about what Org itself > is > doing.) > > I have in .emacs-local.el: > > (setq org-mobile-use-encryption t) > (setq org-mobile-encryption-password "mypasswd") > > and I did org-mobile-push. I found that there was an old agendas.org > that was not encrypted, and it seems that org-mobile-push omits > agendas.org if org-mobile-use-encryption is t, but still creates it > when > nil. I have not been able to reproduce this. > > checksums.dat is in cleartext. This seems ok, but could be a missed > opportunity for some integrity protection. I have a technical reason to not encrypt it - so unless there is someone who really needs it encrypted, I want to keep it like this. > index.org is in cleartext. The list of file names is of course in the > webdav area, and that seems not a big deal, but it also contains the > TODO keyword plan, priority tag list, etc. This is a good observation. And who knows what other information we will eventually put into that file. So I am switching to encrypting this file as well. > > I'm not sure this level of paranoia is warranted, but typical > encrypting > filesystems also encrypt the filenames. It probably suffices to just > warn the user that the filenames of org files will still be exposed in > the DAV area. I have just put this information into the manual. Thanks - Carsten > > > > _______________________________________________ > Emacs-orgmode mailing list > Please use `Reply All' to send replies to the list. > Emacs-orgmode@gnu.org > http://lists.gnu.org/mailman/listinfo/emacs-orgmode