Form/collect security or password

Hi guys,

So I've read that forms can be encrypted using keys etc. Wouldn't it be
easier to have the mobile user setup a pass code on the actual app? Is this
possible at all, or is the only security available at this time through the
encryption process?
Thx so much.

Form Encryption solves a different problem.

If you want to secure a device, you should configure it with a lock screen
with a short lock interval (e.g., when the screen turns off), and encrypt
its SD card.

If you want to secure the transmission of data between your device and your
server, you should configure the server to use an SSL certificate.

Securing your server is often much harder.

  • Do you have it isolated in a locked, protected area (physical security)?
  • Are only highly trusted individuals able to access it?

Whether it is maintained by your organization or hosted on AWS or Google,
these are often hard to guarantee.

Form Encryption ensures that the collected data is never stored on the
server in a readable form. So if someone does gain access to the data on
the server, they are not able to do anything with your data without also
gaining access to your private key.

As unintended side-effects, form encryption also enhances the security of
the finalized submissions on your device, and they also enhance the
security of the transmission of the data.

Mitch

··· On Fri, Jul 31, 2015 at 4:36 PM, Dudley Butt wrote:

Hi guys,

So I've read that forms can be encrypted using keys etc. Wouldn't it be
easier to have the mobile user setup a pass code on the actual app? Is this
possible at all, or is the only security available at this time through the
encryption process?
Thx so much.

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
Mitch Sundt
Software Engineer
University of Washington
mitchellsundt@gmail.com

Don't get me wrong I like the encryption solution, just wondering if it
would make sense also protecting access to the actual collect app using a
pass code.

··· On 1 Aug 2015 9:36 am, "Dudley Butt" wrote:

Hi guys,

So I've read that forms can be encrypted using keys etc. Wouldn't it be
easier to have the mobile user setup a pass code on the actual app? Is this
possible at all, or is the only security available at this time through the
encryption process?
Thx so much.

Awesome good points, thank you for that.

··· On Saturday, August 1, 2015 at 9:36:47 AM UTC+10, Dudley Butt wrote: > > Hi guys, > > So I've read that forms can be encrypted using keys etc. Wouldn't it be > easier to have the mobile user setup a pass code on the actual app? Is this > possible at all, or is the only security available at this time through the > encryption process? > Thx so much. >

No, because there are plenty of app locking apps in the Google Play
store. If you need that functionality, download one of those.

Yaw

··· -- Need ODK services? http://nafundi.com provides form design, server setup, professional support, and software development for ODK.

On Fri, Jul 31, 2015 at 11:32 PM, Dudley Butt dudleygb@gmail.com wrote:

Don't get me wrong I like the encryption solution, just wondering if it
would make sense also protecting access to the actual collect app using a
pass code.

On 1 Aug 2015 9:36 am, "Dudley Butt" dudleygb@gmail.com wrote:

Hi guys,

So I've read that forms can be encrypted using keys etc. Wouldn't it be
easier to have the mobile user setup a pass code on the actual app? Is this
possible at all, or is the only security available at this time through the
encryption process?
Thx so much.

--

Post: opendatakit@googlegroups.com
Unsubscribe: opendatakit+unsubscribe@googlegroups.com
Options: http://groups.google.com/group/opendatakit?hl=en


You received this message because you are subscribed to the Google Groups
"ODK Community" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to opendatakit+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.