separate account from other data for backup/restore #13

Merged
anomalist merged 5 commits from separate-dbs into master 2023-03-20 05:45:23 +00:00
Owner

Separating the account from other data for a few reasons:

  • Long-term, the signing activity will be done by a separate function, even a different app.

  • When backing-up & restoring, dexie-export-import exports the account unencrypted, and I feel the sensitive identifier data needs to be stored externally more securely than the rest of the data. (It's possible to filter out the identity & seed info, but then the table export has 0 elements so an import will erase the data.) This is one of the main reasons I took this action today.

  • For internal signing, the private data should be exposed as little as possible; this will allow us to open and close the DB separately for the signing activities.

Separating the account from other data for a few reasons: * Long-term, the signing activity will be done by a separate function, even a different app. * When backing-up & restoring, dexie-export-import exports the account unencrypted, and I feel the sensitive identifier data needs to be stored externally more securely than the rest of the data. (It's possible to filter out the identity & seed info, but then the table export has 0 elements so an import will erase the data.) This is one of the main reasons I took this action today. * For internal signing, the private data should be exposed as little as possible; this will allow us to open and close the DB separately for the signing activities.
trentlarson added 1 commit 2023-03-19 22:34:08 +00:00
trentlarson requested review from anomalist 2023-03-19 22:34:13 +00:00
trentlarson added 1 commit 2023-03-19 23:33:49 +00:00
trentlarson added 1 commit 2023-03-20 00:23:30 +00:00
trentlarson added 1 commit 2023-03-20 00:29:35 +00:00
trentlarson added 1 commit 2023-03-20 01:47:57 +00:00
anomalist merged commit c47d6d8ae4 into master 2023-03-20 05:45:23 +00:00
Author
Owner

Hm... I didn't see a notification that this was merged.

Hm... I didn't see a notification that this was merged.
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: trent_larson/crowd-funder-for-time-pwa#13