Bug 100397 - Access Control & encryption on individual notes to ensure privacy (eg passwords/ banking details)
Summary: Access Control & encryption on individual notes to ensure privacy (eg passwor...
Status: REPORTED
Alias: None
Product: knotes
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Mandrake RPMs Linux
: NOR wishlist
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
: 152434 (view as bug list)
Depends on:
Blocks:
 
Reported: 2005-02-27 20:36 UTC by Greg
Modified: 2012-04-02 11:06 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Greg 2005-02-27 20:36:48 UTC
Version:            (using KDE KDE 3.2.3)
Installed from:    Mandrake RPMs
Compiler:          gcc (GCC) 3.4.1 (Mandrakelinux 10.1 3.4.1-4mdk) 
OS:                Linux

Notes are a very useful place to store software serial numbers, bank details, password, ISP logon details. All of which are likely to be difficult to remember accurately but may only be required infrequently. It is also vital to keep it private. It would be very useful to have an 'add secure note' option or to be able to convert a note to 'secure' mode (and back). Being secure would encrypt and password protect the note. 

I don't think using the logon password by default would work, because not all users lock their screens when they leave their PCs running unattended or they may have auto logon enabled. Letting the user select their encryption type (maybe with a dropdown listing their private keys) and password would add a useful level of security.

ps... might need a graphical differentiation to show which notes are secure (eg a padlock over the corner of the Knote icon)
Comment 1 Thiago Macieira 2005-02-27 21:57:22 UTC
> Notes are a very useful place to store software serial numbers, bank
> details, password, ISP logon details.

No, KWallet is a useful place to store that kind of thing.

You can't encrypt scraps of paper, or Post-Its, can you?
Comment 2 Greg 2005-02-27 23:37:41 UTC
No,

KWallet is unintuitive and unusable or broken on my system.

I can't say I understand how it works. I cannot get any actions on the manager 
panel, other than to make a new folder and I can't then find any way of 
putting things in the folders. Can't drag/drop to KWallet folders or from 
KWallet folders to anywhere else. It may be just what I need but with that 
level of usability, I may never know.

As an occasional Outlook user and regular but frustrated Notes user, I know 
that I trust Notes to keep stuff safe but find Outlook post-its to be quicker 
and easier to use. My requirement was based on user experience and therefore 
a valid request. If KWallet integrates with KNotes, then I have the answer I 
need but it is not clear that it does???

(P.S. I have run 'real world' metaphor user objects research for IBM and 
understand (probably better than most) where the boundary lies between 
slavish reproduction of features that add no value (e.g. a leather look book 
cover on an e-book) and disregard for useful UI because it falls outside the 
chosen metaphor. The metaphor is a vehicle for a user to associate a package 
of functionality but that function need not be static. It may be reduced or 
enlarged, providing that it helps users associate a bunch of capabilities)

Cheers,

G

On Sunday 27 Feb 2005 20:57, Thiago Macieira wrote:
> ------- You are receiving this mail because: -------
> You reported the bug, or are watching the reporter.
>
> http://bugs.kde.org/show_bug.cgi?id=100397
>
>
>
>
> ------- Additional Comments From thiago kde org  2005-02-27 21:57 -------
>
> > Notes are a very useful place to store software serial numbers, bank
> > details, password, ISP logon details.
>
> No, KWallet is a useful place to store that kind of thing.
>
> You can't encrypt scraps of paper, or Post-Its, can you?

Comment 3 Michael Brade 2005-03-01 11:36:58 UTC
Yes, I have this on my TODO list already. What I thought is using gpg for encryption of a note, this will be the most secure way of doing it.
Comment 4 Greg 2005-05-16 10:06:46 UTC
I have managed to get KWallet working and it does seem like the right place for this sort of private/secure information BUT if the KWallet functionality could be surfaced as a Knote then I think honour would be satisfied on all fronts. I do think the usability is critical to making this (whatever solution) work properly. I'd be happy to offer my services to discuss and help design the details of the user interaction. 

Cheers,

Greg (usability drone @ IBM)
ps this would not constitute IBM work or IBM endorsement.
Comment 5 Thomas McGuire 2007-11-16 23:20:37 UTC
*** Bug 152434 has been marked as a duplicate of this bug. ***
Comment 6 Caleb Cushing 2007-11-17 00:19:07 UTC
could you integrate with kgpg? I would also suggest having a similar encrypt/decrypt/sign like the editor in kgpg has. 

I don't see kwallet as a complete solution, because it doesn't have a good direct user interface for adding miscellaneous sensitive information, although it should work for any password that you'll need on the computer. It could be a good backend to store the information or just for storing the password to the note.

in response to comment 1 kwallet is like a safe, and we can write out passwords on sticky notes and put them in the safe, but we don't use the safe to write the information, or read it, just to secure it. alternatively we could write them out in the kgpg editor or, encrypt and print them, then ocr them when we need the info, but this isn't convenient either.