search

DimensionDev / TesserPG-Talks

Where talks of Tessercube happen.
0 stars 0 forks source link

Request Touch ID/password less frequently #1

Open Tedko opened 5 years ago

Tedko commented 5 years ago

E.g.: request password for decryption every 24hr

jk234ert commented 5 years ago

let's move this issue to tessercube :)

yisiliu commented 5 years ago

This should be included as an option in the Settings @neruthes What do you think?

neruthes commented 5 years ago

This should be included as an option in the Settings @neruthes What do you think?

Technical feasibility may remain subject to investigation.

Tedko commented 5 years ago

@jk234ert

jk234ert commented 5 years ago

If we confirm to continue using keychain to store key passwords, the only way to reduce Touch/Face ID request is -- we implement our security layer above system's keychain, e.g.:

  1. Record the last time user successfully unlocks key password from keychain.
  2. Once successfully unlocked, save all tessercube-related items in another place as cache.
  3. Each time user requests key password, check if cache should be treated as expired (time passes 24 hrs, e.g.), if not, fetch data from cache, otherwise rise a Touch/Face ID authentication again.

I'm still investigate if there is system pre-defined behavior to archive same mechanism, I'll post under this thread once I found any

neruthes commented 5 years ago

On the meta level, "Request Touch ID less frequently" is not a feature, but "New credential management mechanism" is. If you do not have the specifications for the feature-to-be-implemented, you should not use the writing style of features in the title or label the issue as feature. Instead, your issue should be a question like "Is it possible to request Touch ID less frequently".

I will write a systemic guideline of development management when I have time.

Tedko commented 5 years ago

Some thoughts: maybe we should let User not use touchID (provided in the setting )

Tedko commented 5 years ago

Thoughs : It’s better to request the touchID when open up the App instead of requesting when decryption

neruthes commented 5 years ago

Now we have a more appropriate place to allow you posting ideas and random thoughts like this one — https://github.com/DimensionDev/Tessercube-Talks

neruthes commented 5 years ago

There are a lot of details which remain to be enhanced. But we need a more strategic plan to determine how should we allocate our manpower onto tasks.