Richard Newman wrote, On 21.10.2014 19:19: > [OpenSSL] might finally put us in a place where we’re OK keeping profiles on > an SD card. We might also consider using this for secure backup/restore of > profile data.
I wouldn't particularly trust OpenSSL anymore. And any encryption doesn't help you, if you don't have a secure place to store the key. SD card vs. internal: I'd rather have my profile unencrypted on an SD card than unencrypted on the internal memory. Case in point: My expensive tablet dissolved itself after 5 months, needs repair, and the "reset to factory" option explicitly tells me that they cannot guarantee that all data will be wiped. So, I can either physically shred my tablet or risk that the vendor sees my private data. With an SD card, I can just remove it and keep it or shred it. Encrypted vs. unencrypted: I personally would opt for unencrypted, because I like to see my own data, on my own devices, using any tool of my choice. Just give me the option where to store data (including the exact folder on the SD card), and whether it's encrypted or not. These are 2 entirely different questions. Ben _______________________________________________ mobile-firefox-dev mailing list [email protected] https://mail.mozilla.org/listinfo/mobile-firefox-dev

