framagenda-core issueshttps://framagit.org/framasoft/framagenda-core/-/issues2017-10-05T10:43:52Zhttps://framagit.org/framasoft/framagenda-core/-/issues/158account deletion2017-10-05T10:43:52ZThomasthomas.citharel@framasoft.orgaccount deletion*Created by: jancborchardt*
People should have the possibility to delete their own account through the personal settings.
The question is how usernames and still present data should be handled.
* moved into another directory deleted...*Created by: jancborchardt*
People should have the possibility to delete their own account through the personal settings.
The question is how usernames and still present data should be handled.
* moved into another directory deleted-users or so, so that it’s inaccessible for people who register the same name afterwards, but could still be restored by an admin, but automatically deleted after some time?
* completely deleted on the spot?backloghttps://framagit.org/framasoft/framagenda-core/-/issues/154Workspaces for groups2017-10-05T10:43:52ZThomasthomas.citharel@framasoft.orgWorkspaces for groups*Created by: maxitco*
It would be great if you could dedicate a shared folder to a group and assign a data quota to it.
Until now you can do that by creating a folder in the owncloud data root and mount it for a group, but without qu...*Created by: maxitco*
It would be great if you could dedicate a shared folder to a group and assign a data quota to it.
Until now you can do that by creating a folder in the owncloud data root and mount it for a group, but without quota, not configurable from inside owncloud, no visible creator of files, also the folder is not marked different so the user can see that it is for a whole group. Creating/managing such 'workspaces' would be a great admin function.backloghttps://framagit.org/framasoft/framagenda-core/-/issues/106Enhancement/design idea: encrypt everything: client-side end-to-end encryptio...2017-10-05T10:43:52ZThomasthomas.citharel@framasoft.orgEnhancement/design idea: encrypt everything: client-side end-to-end encryption using OpenPGP JavaScript implementation, not requiring additional software to be installed*Created by: Wikinaut*
I file this as suggestion to overcome several problems with the server-side encryption of pre-4.5 versions.
Situation ownCloud (as far as I understand it)
* when using the server-side encryption, you cannot sh...*Created by: Wikinaut*
I file this as suggestion to overcome several problems with the server-side encryption of pre-4.5 versions.
Situation ownCloud (as far as I understand it)
* when using the server-side encryption, you cannot share files. Files are encrypted per single key for all files in the user directory. Sharing would require to pass the key to the person with whom you want to share the file.
Current developments:
* http://sebsauvage.net/wiki/doku.php?id=php:zerobin is a opensource online pastebin/discussion board where the server has zero knowledge of hosted data. Data is encrypted/decrypted in the browser using 256 bits AES. See also http://www.heise.de/security/meldung/Interessantes-Konzept-fuer-verschluesselte-Pastes-1541988.html
* http://gpg4browsers.recurity.com/ and http://www.openpgpjs.org/ (new [1]) and http://www.heise.de/newsticker/meldung/OpenPGP-im-Browser-1381826.html
Using the mentioned techniques it would become possible
* to have a possibility for a platform independent (browser-) client-side encryption and decryption of files. All data traffic to the server would be encrypted, all files are only stored encrypted on the server, and no server-side encryption will be necessary any longer.
* to assign all users a user key (each user has their own user key), and all their files got encrypted (client-side) with their specific user's key
* to share (encrypted) files, given that they are encrypted with more than the key of the user, for example the user key and a key for another user, or for another group who shares one group key.
* enterprise users, where in enterprises usually the installation of additional software is prohibited, can participate as any other user, because the en/decryption takes place in their browsers and does not require installation of any software (GPG, openPGP, ...) except a contemporary HTML5 browser which is capable to run the client-side crypto algorithms.
* all traffic is encrypted
* no plain files on the server
[0] https://github.com/openpgpjs/openpgpjs/wiki/Introduction#wiki-impl-js Other OpenPGP JavaScript implementations
[1] http://www.openpgpjs.org/
This project aims to provide an Open Source OpenPGP library in JavaScript so it can be used on virtually every device. Instead of other plugins that are aimed at using e.g. NPAPI (meaning they are intended to run native code), OpenPGP.js is meant to bypass this requirement (i.e. people will not have to install gpg on their machines in order to use the software). The idea is to implement all the needed OpenPGP functionality in a JavaScript library, to reuse it in other projects and to provide example applications and browser plugins. It should allow you to sign, encrypt, decrypt, and verify any kind of text - in particular e-mails - as well as managing keys.
[2] https://github.com/openpgpjs/openpgpjs/issues/12 Feature: PGP encrypted file upload/download
[3] https://github.com/hellais/up-crypt client side AES encrypted file upload.
[UPDATED 20121210]
[4] http://www.mailvelope.com/ Mailvelope is a browser extension that allows to exchange encrypted emails following the OpenPGP encryption standard.
[5] https://github.com/toberndo/mailvelope
[updated 20130102]
[6] http://www.dp-dhl.com/en/media_relations/press_releases/2012/docwallet_documents_manager_for_the_ipad.html Deutsche Post AG end-to-end AES-256 encryption for documents
[7] http://www.heise.de/ct/inhalt/2013/02/42/ "PDF-Tresor von der Post" article in "c't" 2013/2 page 42
[updated 201304261]
[8] https://github.com/toberndo/mailvelope/issues/45 regarding private key security
[updated 20131114]
I just found these cloud services claiming to offer end-to-end encrypted cloud services
[9] SpiderOak https://spideroak.com/
[10] TeamDrive http://www.teamdrive.com/de/
backlog