Re: [Ann] CintaNotes 2.9 Beta 1!
Posted: Mon Apr 20, 2015 2:47 pm
Working well for me.
Nod
Nod
CintaNotes Developer wrote:- Ability to re-ask password after a timeout
usbpoweredfridge wrote:I'm having trouble getting this part to work - is it based on a PC timeout, or a CN specific timeout? If PC specific, that would probably explain why CN does not seem to be auto-locking after 5 minutes of not using it.
Edit: Ok, even after 5 minutes of not using my PC, CN is still unlocked. I guess I am just not understanding exactly what this timeout option is meant to do. I was hoping it would be exactly like KeePass - set a timeout, and if you don't use the program for that amount of time, it locks (re-encrypts) the DB, meaning you have to re-enter your password if you want to open it back up. The timeout applies regardless of whether the program is minimised or non-minimised.
CintaNotes Developer wrote:Currently the timeout specifies how much time CN must be minimized to tray in order to lock access.
Otherwise it would be necessary to somehow hide notes that are currently already visible in the list.
Probably the wording should be updated, or an option added to auto-minimize CN to tray and lock after this timeout.
However I don't know what to do in case "Minimize to tray" option is not set.
CintaNotes Developer wrote:Does KeePass auto-minimize itself to tray after the timeout?
usbpoweredfridge wrote:Right, yes. From the wording, I had a very different idea as to how the option would work. At the very least, the documentation needs to be updated to make it clear how it works (eg it doesn't work while CN is actually open). The other thing about that - assuming you manually minimise the CN window itself, I would expect that CN would lock its database as soon as you minimise it to the tray. At the moment, from what you said, it appears that the DB will still be unlocked (decrypted) for the minimum of 5 minutes after you minimise it (as 5 minutes is the minimum time you can set in the password dialog) - a '0 minutes' option would be very much appreciated here. Personally, if I minimise CN, I am essentially saying "I do not want anyone else to be able to see this DB unless I enter my password - and that includes myself".
I would say for the moment, keep it simple. Update the documentation to say exactly how the password options work, and don't worry about minimising CN once the timeout period is up (ie the 'minimise to tray' option is irrelevant) - just lock the DB in place once the timeout has occurred.
CintaNotes Developer wrote:All in all, I think auto-minimizing and locking is actually the better option, and also the easiest to implement.
CintaNotes Developer wrote:Also, some beta testers were concerned that the background operations like backup and sync weren't running directly after startup until the password was entered for the first time. This was counter-intuitive for them. I guess we'll need to give the users an option to enable background operations on an encrypted DB, even with the cost of reduced security (the password will have to be stored somewhere to decrypt the DB for the background operation). Also it will enable clipping new notes in silent mode without entering the password - huge usability win.
Thomas Lohrum wrote:CintaNotes Developer wrote:All in all, I think auto-minimizing and locking is actually the better option, and also the easiest to implement.
I agree. Seems like a solution which guarantees the database is safe in regards of not being able to be used by other users.