google-code-export / ttrss-reader-fork

Automatically exported from code.google.com/p/ttrss-reader-fork
1 stars 2 forks source link

on device security - enhancement #246

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Hello. This is follow on from #245

The guardianproject created a number of libraries for developers to use in 
their software to improve their security.

I would like to make the suggestion that you implement their IOCipher and 
SQLCipher[1] libraries into ttrss-reader-fork.

The biggest benefits would be

IOCipher:

- On install users could create a password specific to ttrss-reader, this would 
then protect all ttrss-reader files inside an encrypted container.

If on install a user chose not to set a password ttrss-reader would be stored 
on the device as normal

SQLCipher

- provide an encrypted sqlite database to ensure information is kept secure.

[1] https://guardianproject.info/code/iocipher/
https://guardianproject.info/code/sqlcipher/

Original issue reported on code.google.com by httpl...@gmail.com on 19 Jun 2014 at 5:16

GoogleCodeExporter commented 9 years ago

Original comment by nils.braden on 7 Aug 2014 at 5:30

GoogleCodeExporter commented 9 years ago
I recently had a look at this library and decided not to include it in this app.

Reason:
  * Android device support full device encryption, I don't see any advantage of a scenario where all apps encrypt their own stuff.

Original comment by nils.braden on 21 Oct 2014 at 9:06