Hello Arlen,

With all respect and thankfulness for tw5-dropbox, I feel a bit unease 
about my security using your third party app 
https://twcloud.github.io/tw5-dropbox for saving my TW in my dropbox,
because I fear the dropbox authorization I give to a third-party 
application might be abused (in case Arlen gets compromised).
Furthermore, I am using the TW encryption, and entering my TW decryption 
password while being on the domain twcloud.github.io makes me unease as 
well (even though I know this is only local and will not be sent...again if 
Arlen's page gets compromised, an injected malicious JS could steal my 
entered password).

I am new to TW and therefore ask myself:

Would it be possible or a good idea to have a dropbox save-plugin in TW 
that does basically the same as your tw5-dropbox application, but with JS 
within my TW?
Since my TW is encrypted anyway, it would be somewhat secure to store the 
dropbox bearer token within a field of this save plugin, as it will be 
encrypted within the TW.
The only challenge I see is, how to obtain with JS the full saved TW from 
the DOM as payload for the upload request?

Thanks for your thoughts about my question.

Sebastian

Am Mittwoch, 13. April 2016 23:16:38 UTC+7 schrieb Arlen Beiler:
>
> Hi Mal,
> I don't think it will affect it.
> By the way, you can now access the path from tiny.cc/tw5inthesky.
> Enjoy!
> -Arlen
>
> On Fri, Mar 18, 2016 at 12:45 AM, Mal <[email protected] <javascript:>> 
> wrote:
>
>> I note that Dropbox are making some changes to their API 
>> https://blogs.dropbox.com/developers/2015/04/deprecating-the-sync-and-datastore-apis/
>> ).
>>
>> I'm not site what this means for Tiddlywiki In The Sky...
>>
>> Mal
>>
>> --
>> You received this message because you are subscribed to the Google Groups 
>> "TiddlyWiki" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected] <javascript:>.
>> To post to this group, send email to [email protected] 
>> <javascript:>.
>> Visit this group at https://groups.google.com/group/tiddlywiki.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/tiddlywiki/cc9dd763-cc83-40c4-9d65-1f4bfae8e8f6%40googlegroups.com
>> .
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"TiddlyWiki" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tiddlywiki/75b113de-ca22-4375-b401-2031317257a4%40googlegroups.com.

Reply via email to