search

cryonics-institute / checkin

A Mobile+Web Suite That Lets Those You Love Know You're OK; A Dead Man's Switch for Your Phone
GNU General Public License v3.0
3 stars 1 forks source link

Anonymize Database #45

Open ghost opened 5 years ago

ghost commented 5 years ago

The documents that store the patients' checkin information on the Firebase Firestore are currently indexed using the their e-mail. This identifies that information to anyone, namely the developers ... namely me, who has access to the Firestore. It would be better to obfuscate or even encrypt this information using a key. I haven't looked in to how to do this, and so I am open to suggestions.

ghost commented 4 years ago

I think this can be done simply by using the patient's Firestore document ID instead of their e-mail when getting and setting the document. However, if the e-mail is used to find the document from the user's device, then this won't work. So, check it out.