+214
Planned
Alex Jenter 7 years ago • updated 6 months ago 15
There should be a possibility to encrypt selected notes (and them only) and have CintaNotes display its contents only after entering a password.
security complexity:medium

Answer

Answer
Under review
Please tell which kind of encryption you'd like to have:
1) Encrypt whole notebook file (when CN is running, the file is decrypted)
2) Encrypted tags (decrypt on command, with timeout)
3) Encrypted individual notes (decrypt on access, encrypt on close)

Thanks! 
+8
Encrypted notes will make cintanotes the center of my digital universe! Now i keep some notes in different places, where i can make them private. If cintanotes will be able to password-protect notes, it will be awesome. I can keep all my stuff in one program then, so cool.

Maybe it will be great feature to make tag-based password? So you make a tag, assign a password for this tag, and then all the notes with this tag are password-protected. So to lock note you only need to add a tag to it, and to unlock -- remove that tag.

For example, you create new tag "private", mark it as "password-protected", assign password to that tag. And then just mark some notes as "private" on the go. The fastest way i can imagine.

http://img685.imageshack.us/img685/835/ss20101017161618.png

Maybe something like this? Alex, what do you think? How do you see this feature?
+2
Nice idea, though I don't think that assigning passwords should be done in add/remove tag dialog. I think it is more appropriate for right-clicking on a tag and choosing "Set Password...". The question here is: what should protected with such tag notes look like in the notes list?
+4
Alex, you right, set password via right click will be much better. I just forgot that i can do right click on tags :)

Maybe just force-collapse protected note in notes list? Like so — http://img686.imageshack.us/img686/9715/ss20101022095708.png

However, it will be problem if title must be secret to, or if there is no title at all on bunch of private notes, they will look the same.

What do you think?
+5
I like your draft. The obious solution to the title question would be
to leave the title unprotected. This should pose no serious problem.
Another solution would be to hide the protected notes completely until you pick this tag,
but it is less consistent.
or you just display "password protected" in the title area as long as the note is locked. But I would offer an option whether the user want's to show the title always or not. (If I had a choice I think most of the time I would display the title also for protected notes)

I hope it is also planned to do a real encryption - so the sensitiv information is also save if the database file is stored online.
Please tell which kind of encryption you'd like to have:
1) Encrypt whole notebook file (when CN is running, the file is decrypted)
2) Encrypted tags (decrypt on command, with timeout)
3) Encrypted individual notes (decrypt on access, encrypt on close)

Thanks!
I hope to get number 2 !
I think tag based encryption would be the most flexible one :-)
Answer
Under review
Please tell which kind of encryption you'd like to have:
1) Encrypt whole notebook file (when CN is running, the file is decrypted)
2) Encrypted tags (decrypt on command, with timeout)
3) Encrypted individual notes (decrypt on access, encrypt on close)

Thanks! 
i support this function, if can encrypt item independently.
Please check my request here: roadmap.cintanotes.com/topic/150781-section-encryption/


I would love to have all of those encryptions!

I would like option 1 - but I really am concerned about Cintanotes as a whole when it comes to security.


I do not use CN for sensitive subjects - since Edward Snowden and as a Security Now subscriber I worry about privacy of my notes - now SpiderOak have announced a zero-knowledge note-taking product, I will consider that when launched.


If you don't use syncing, then CN's security should be ok for you. It uses AES-256 for encrypting whole notebook file.