On Tue, 2014-02-04 at 11:56 +0000, Mark De Roussier wrote:
> What you say about sqlite databases raises a broader question for me.
> In general, should Tizen's approach to data-at-rest security be
> fine-grained and use-case specific ( i.e. different techniques
> according to circumstance ), or would it be preferable ( if
> performance requirements are not compromised ) to take a cruder but
> simpler approach e.g. store any data that should be secured on a
> loop-AES device ?

I've argued elsewhere for an encrypted partition instead of having
individual userspace programs, but that turned out to be not acceptable
for various reasons.

> Perhaps the needs of the underlying system/middleware and the needs of
> Application level entities are sufficiently different that different
> approaches are justified.

Indeed, that was also my conclusion. It depends so much on circumstances
which are outside of the control of Tizen (hardware capabilities, use
cases) that Tizen itself can only provide different alternatives that
the actual product team then chooses from.

Right now, there is nothing at all as far as I know.

-- 
Best Regards, Patrick Ohly

The content of this message is my personal opinion only and although
I am an employee of Intel, the statements I make here in no way
represent Intel's position on the issue, nor am I authorized to speak
on behalf of Intel on this matter.


_______________________________________________
IVI mailing list
[email protected]
https://lists.tizen.org/listinfo/ivi

Reply via email to