Re: [O] org-crypt.el security problem (From: Milan Zamazal)

[Bastien]

Hi Julien,

Julien Danjou <address@hidden> writes:

> What I can also suggest is to never show the encrypted block in the Org
> buffer.

I agree this would be better.

> This is what I do in my configuration: on Org file loading, I decrypt
> all entries. Therefore I never see the GPG block. When I save,
> everything is encrypted, written, and then re-decrypted.

Can you share your config?

> Using org-crypt this way, it would be easy to fix auto-save-hook. 

I see: auto-save-hook would encrypt, write to ~/.#file# then decrypt the
original buffer back again -- yes?

> With the current way on letting the user decrypt heading by heading,
> it does not seems that easy. :)

Yep...

-- 
 Bastien