Remix.run Logo
jimkleiber 6 days ago

I built a micro-journaling app back in the day and wanted it to be highly secure. Backups seemed to be one of the most vulnerable surfaces for that. I imagine their delay might have been a combination of a technological and ideological worries, as that's what I experienced.

_aavaa_ 6 days ago | parent [-]

How did you encrypt the data at rest and why was that also not good for the backup?

jimkleiber 5 days ago | parent [-]

SQLcipher, and i believe the tech was good but at the time, because it asked for a password every time the app open, i figured most people would put a very short and simple password and an encrypted db with a short password was a lot more hackable, especially on Android, if the file got outside the app sandbox.

I suppose now i could do some combination of PIN plus passkey, and have to figure out how to make the database recoverable if people forget their PIN (or lose their passkey?) without me having to store it for them or it being easy to access.

I'm no expert on this, just think the complexity can be a lot more when taking this all into consideration.