[Evolution-hackers] Cache encryption

2011-03-04 Thread David Woodhouse
I'm working on Enterprise use of Evolution, and one of the big requirements is encryption of data at rest. The answer just encrypt the whole of the user's home directory only puts them off for so long. So I'm looking at implementing this directly in camel-data-cache, e-cal-backend-cache, etc.

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread Matthew Barnes
On Fri, 2011-03-04 at 11:40 +, David Woodhouse wrote: I'm working on Enterprise use of Evolution, and one of the big requirements is encryption of data at rest. The answer just encrypt the whole of the user's home directory only puts them off for so long. Can you go into more detail about

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread Matthew Barnes
On Fri, 2011-03-04 at 12:25 +, David Woodhouse wrote: On Fri, 2011-03-04 at 07:17 -0500, Matthew Barnes wrote: Perhaps it's a different story for mobile devices? To a large extent, yes. The 'encrypt it all' solution means that you are forced to unlock the device to do *anything* with

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread David Woodhouse
On Fri, 2011-03-04 at 07:30 -0500, Matthew Barnes wrote: Got'cha. Seems reasonable. Thanks for humoring me. No problem; thanks for paying attention to my ramblings. -- dwmw2 ___ evolution-hackers mailing list evolution-hackers@gnome.org To change

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread Sankar P
I'm working on Enterprise use of Evolution, and one of the big requirements is encryption of data at rest. The answer just encrypt the whole of the user's home directory only puts them off for so long. So I'm looking at implementing this directly in camel-data-cache, e-cal-backend-cache,

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread David Woodhouse
On Fri, 2011-03-04 at 07:49 -0500, Jeffrey Stedfast wrote: Easiest way to implement this feature in Camel might be to implement a CamelMimeFilter or CamelStream that encrypts/decrypts the content as it reads/writes the data. Implementing it as a CamelStream might be the best approach as it

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread David Woodhouse
On Fri, 2011-03-04 at 05:47 -0700, Sankar P wrote: Will it be not simpler if we can make Evolution use a custom location for cache, that the user/root can set ? That way, we don't have to write (and more importantly maintain) yet another encryption/decryption library and instead just use

Re: [Evolution-hackers] Cache encryption

2011-03-04 Thread David Woodhouse
On Fri, 2011-03-04 at 07:49 -0500, Jeffrey Stedfast wrote: Anyways, do you also plan on encrypting mbox/maildir files? Might make sense... Missed that bit; overtrimming my citations. I probably wouldn't do this *myself* in the first round, but I'd hope that someone might add it soon, and I