search

scotttrinh / angular-localForage

Angular service & directive for https://github.com/mozilla/localForage (Offline storage, improved.)
MIT License
651 stars 86 forks source link

Storage encryption #36

Open ocombe opened 10 years ago

ocombe commented 10 years ago

We could add an encryption functionality such as the one described in ngStore for Angular 2: https://docs.google.com/document/d/1DMacL7iwjSMPP0ytZfugpU4v0PWUK0BT6lhyaVEmlBQ/edit#heading=h.57girrphcre7 And something like that maybe: https://github.com/jas-/secStore.js

billymedia commented 10 years ago

How insecure is indexeddb/websql when used in a phonegap app? Is it easy for someone to access and interrogate stored data?

ocombe commented 10 years ago

Well you just have to plug the device with usb to a computer and you can remote inspect the webview with chrome or safari. You can then access the storage (indexedDB, WebSQL & local storage) and read all the stored data. But you need to have the device in hand to do that.

billymedia commented 10 years ago

Thought as much. Decided to keep some data in parse.com and less sensitive stored.

scotttrinh commented 8 years ago

Let's open this back up for 1.4.0.