Researching a 'Zero-Trust' storage layer for deltachat-core-rust — thoughts?

[ian]

Related:

Local encryption

Please, implement encryption of attachments and text messages while they are stored locally on the device. Apps with root access can read unencrypted text and see attachments. For instance, look how it is done in Signal and may be Threema (which is not open source). Is it possible?

Proposal for Additional User Data Encryption

Dear Developers, I’d like to propose considering the possibility of adding optional, additional encryption for some critical user data stored locally on the device. From my understanding, the current implementation stores the database with messages, files, and, most importantly, the server login credentials and the private PGP key in an unencrypted state. I’ve found that the account password, in particular, is stored in plaintext within the SQLite database file located at DeltaChat/accounts/dc…

Bug : database, pictures and sound not encrypted on the phone

The database dc.db is not encrypted on the phone and the pictures and sound are not encrypted on the phone too. for example the pictures in the messages are stored in plaintext in the dc.db-blobs directory. coudl you encrypt all this stuff ?

The database is not encrypted

Hello, I downloaded the last delta chat version 1.28.1 : it says “your messages will be encrypted locally”. I open the dc.db database on my phone and my messages are in plaintext, not encrypted. same for the password for my email account. How to activate the encryption you promise ?

Encrypt and lock the application on exit

Hello everyone. Thanks to the developers for creating such an app and forum. I’d like to see the app add the ability to enter a password when creating a profile so that it can be unlocked the next time I open the app. I’d like the app locking feature to be encrypted. I live in a place where someone can easily snatch my phone or laptop and search it, so this security feature is very important to me. Overall, the app is very cool and has an excellent design, unlike Briar or Tox.

Are backups encrypted?

Are backups exported by the iOS app encrypted? Should I be extra careful while handling them?

Protecting backups/imports + custom target option

Ref. https://github.com/deltachat/deltachat-android/issues/1685 Operating System: Android Delta Chat Version: 1.12.5 Expected behavior: Ask for password on import (and first choose backup folder) Actual behavior: Importing any backup without security, worse: from Downloads Steps to reproduce the problem: Normal backup/import Backups really need to be protected by a backup-specific password. (Manually set by the user at the time of the backup, and not the account login password. It is importa…

Encrypted backup of chats

Are you planning to encrypt backups? They are now stored in the archives.tar is completely open, you can go in and view all the contents. In the same Threema, I remember saving a backup copy.zip with AES-256 adhesion. Convenient and practical. I don’t know now, I’ve completely switched to DeltaChat and am slowly pulling up the rest.

Encrypt Backup and Keys with a passphrase while exporting

Can you add encryption feature as I am exporting the backup and keys. This way you can transmit the backup on an unsecure channel and even if an attacker intercepts it, he will not be able to read the chats without the password. Thanks.

Password-protected backup: Urgent call to coders

Hello and thank you for Delta Chat! I think this great software urgently needs to provide a password-protected backup. Unfortunately, I am not a coder. People are installing Delta Chat on their phones using their BigTech email accounts; they like the app so much that, if they have another device (laptop, tablet…), they are installing it there too. That sounds like good news but, how do they take that backup file to the other device? Through BigTech!! So, if that backup file is not password-pr…