Encrypting notes (org-crypt)

[trmendes]

It would be nice to be able to apply cryptography to my notes. Maybe using OpenKeyChain.

+1

I think openkeychain crypto is async, though, which causes things to get complicated.

I have implemented something similar for Simplenote on android that is still pending PR. I used Spongycastle and symmetric password crypto.

However, for orgzly, I would prefer to edit something.org.gpg via openkeychain, and commit that to git and edit it in other synced environments, like *nix emacs, where epa could be used with the same credentials.

Ah! You mean org-crypt! I was thinking full-note encryption, but that wouldn't actually be necessary, I guess.

Yes, +1 to being able to apply org-crypt-style crypto.

[mkaito]

I would absolutely love support for org-crypt via OpenKeyChain!

[avently]

You want to encrypt just one note?
I think we need an option to encrypt all notes before syncing with sources like Dropbox. Like Laverna did. Is that possible and easy for Orgzly?

[mkaito]

I think I would love to see both.

[timoc]

I keep my org notes in an encrypted encfs folder, i would prefer to see orgzly more encfs aware, having some boxcryptor classic link or incorporate some cryptonite

[djmaze]

As a side note. Have you guys considered using Syncthing as opposed to some centralized cloud storage? It's end-to-end encrypted so additional encryption is not compulsory. Works quite well for me with Orgzly. If your devices are often running at different times, you'll want to run you own central server though.

[mkaito]

Martin Honermeyer <notifications@github.com> writes:

As a side note. Have you guys considered using [Syncthing](https://syncthing.net/) as opposed to some centralized cloud storage? It's end-to-end encrypted so additional encryption is not compulsory. Works quite well for me with Orgzly. If your devices are often running at different times, you'll want to run you own central server though.

Yes, I used it until just recently. I switched to Resilio because Syncthing doesn't support external SD cards on Android, and probably won't for a very long time, since Golang apparently doesn't support the necessary APIs (hilariously ironic). After messing about with various ways to sync things, I ended up going with proprietary and closed source Resilio, because nothing worked properly ever.

…

-- BOFH excuse #283: Lawn mower blade in your fan need sharpening

@djmaze

Yes. I use it.

However, there are some things in my notes that need even better security. I want org-crypt for those things.

There is no such thing as too much security. ;)

[robb-romans]

+1