search

evpo / EncryptPad

Minimalist secure text editor and binary encryptor that implements RFC 4880 Open PGP format: symmetrically encrypted, compressed and integrity protected. The editor can protect files with passwords, key files or both.
https://evpo.net/encryptpad
Other
433 stars 64 forks source link

Links Detection #88

Open smaragdus opened 4 years ago

smaragdus commented 4 years ago

It would be extremely convenient (at least for me) if EncryptPad could detect URL links and mail links, example:

AkelPad 4 6 0 - 2020-01-03 - links - 002

My encrypted files often contain URL and mail links and if EncryptPad could detect them it would be easier to open these links in default web browser and in default mail client via double click or via CTRL+click.

evpo commented 4 years ago

URL links in encrypted media are source of vulnerability. If sensitive information for one reason or another is recognised as an URL or follows a link in a dangerous way, it's going to be sent to the browser and the internet.

If this functionality is implemented, the user should be made aware of the risks involved. It may be safe for some files but dangerous for others. Probably one global setting is not ideal.

smaragdus commented 4 years ago

@evpo

I generally agree with you yet I suppose that users using such a program would know what they are doing. For example EncryptPad may be used for storing log-in credentials and a file may contain data in this pattern:

In this case the sensitive data is not the URL but the user name and the password.

Another example- EncryptPad may also be used for storing contact details and a file may contain data in this pattern:

In this case the most sensitive data is the phone number and the mail address. Yet opening mail client directly from EncryptPad via mailto: link doesn't seem to be a huge security risk to me. Neither does opening a website link directly from EncryptPad.

If links detection is implemented it may be disabled by default. At least for me such a feature would be a huge improvement and a great convenience as it would seriously cut down the need to copy and paste.