Encrypt LocalDB #1

New Issue

kske · 2020-09-06T10:43:31+02:00

kske commented

2020-09-06 10:43:31 +02:00

Encrypt the user specific LocalDB file with the user's password.

This prevents unauthorized access to the file by other users or from outside the application.

Encrypt the user specific LocalDB file with the user's password. This prevents unauthorized access to the file by other users or from outside the application.

kske added the

client

M

labels 2020-09-06 10:43:31 +02:00

kske self-assigned this 2020-09-06 10:43:31 +02:00

kske added this to the v0.2-beta milestone 2020-09-06 10:43:34 +02:00

kske added a new dependency 2020-09-18 08:55:13 +02:00

#28 Token-Based Authentication

kske commented

2020-09-18 08:56:23 +02:00

Once token based authentication is implemented, the password cannot be used as an encryption key, because it is not entered during every application startup.

Instead, the authentication token could be used, but this is obviously insecure as that token is stored on the same system in plain text.

Once token based authentication is implemented, the password cannot be used as an encryption key, because it is not entered during every application startup. Instead, the authentication token could be used, but this is obviously insecure as that token is stored on the same system in plain text.

kske commented

2020-09-19 13:55:45 +02:00

As the user doesn't enter his password upon every startup when using token-based authentication, encrypting the local database securely is impossible without compromising offline mode or relying on external software such as policykit.

kske removed a dependency 2020-09-19 13:55:57 +02:00

#28 Token-Based Authentication

kske closed this issue

2020-09-19 13:55:59 +02:00

This repo is archived. You cannot comment on issues.