Open ghost opened 7 years ago
Pretty intense. Why not just Touch ID?
@mobitar Hahaha I didn't mean 10/15 hour xD, meant minutes. I personally don't use Touch ID, but I guess that would also be fine for other users.
Currently the threat model that SN relies on is "your local device is considered safe." So we don't try too hard on protecting local contents. Obviously that would be the next step to tackle, to make SN a little more paranoid about your local device, but this would be another challenge that would require careful orchestration.
I think deleting local data is not necessary if it is encrypted. Just lock it and ask password or TouchId next time when the application is opened.
Automatic log out and delete all notes after 1, 2, 10, 15, minutes / hours etc. Would be be great for security.