Skip to content

Conversation

@iequidoo
Copy link
Collaborator

@iequidoo iequidoo commented Nov 22, 2025

  • Db encryption does nothing with blobs, so fs/disk encryption is recommended.
  • Isolation from other apps is needed anyway.
  • Experimental database encryption was removed on iOS and Android.
  • Delta Touch is using CFFI API with a manually entered password because Ubuntu Touch does not offer filesystem or disk encryption, but we don't want new users of these APIs, such as bot developers.

Close #7403

@iequidoo iequidoo requested review from link2xt and r10s November 22, 2025 17:59
src/context.rs Outdated
}

/// Opens the database with the given passphrase.
/// NB: Nonempty `passphrase` (db encryption) is deprecated. See
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can also be TBD deprecated

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok. Note that it is still used internally though

@iequidoo iequidoo force-pushed the iequidoo/deprecate-db-encryption branch from 6bc0792 to 598ea22 Compare November 22, 2025 20:52
- Db encryption does nothing with blobs, so fs/disk encryption is recommended.
- Isolation from other apps is needed anyway.
- Experimental database encryption was removed on iOS and Android.
- Delta Touch is using CFFI API with a manually entered password because Ubuntu Touch does not offer
  filesystem or disk encryption, but we don't want new users of these APIs, such as bot developers.
@iequidoo iequidoo force-pushed the iequidoo/deprecate-db-encryption branch from 598ea22 to 57231b7 Compare November 22, 2025 20:57
@iequidoo iequidoo merged commit ba3cad6 into main Nov 22, 2025
29 checks passed
@iequidoo iequidoo deleted the iequidoo/deprecate-db-encryption branch November 22, 2025 21:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Mark CFFI for encrypting the database as deprecated

3 participants