Hi,

Is the database encrypted? In case the iphone gets stolen, the userdata is safe?

Best regards
Alex

[Andrew]

No, we don't do any encryption of the data. If this is important to you (as it presumably is, since you're asking about it), please email omnifocus-iphone@omnigroup.com to register your request.

[JKT]

Added my vote for this. Bare minimum would be to add a password/code entry option to prevent access to the database on the phone.

[SpiralOcean]

Is the user password that is sent to mobile me encrypted?

[Toadling]

Originally Posted by SpiralOcean

Is the user password that is sent to mobile me encrypted?

Yes, I believe so. Communications with MobileMe's iDisk is done over HTTPS. Which means your data is transmitted securely as well.

However, once the data arrives on Apple's servers, it's vulnerable to unscrupulous Apple employees or contractors. And, if you've syncing with your iPhone, the data could be accessed by anyone who steals your phone (or your Mac, for that matter).

-Dennis

[SpiralOcean]

That's a relief... I assumed it was secure, but didn't know for sure.

I wonder if it would be possible to create an encrypted sparse bundle disk image that OF could reside in on the Apple server. Much like how filevault works for users.

http://en.wikipedia.org/wiki/Sparse_disk_image

[Andrew]

Yes, MobileMe's WebDAV uses HTTPS and is secure. Other WebDAV servers may or may not use HTTPS. If they don't use HTTPS, they may at least use Digest authentication, to secure the login info. Personally, I'm very reluctant to sent this kind of data around unencrypted, so having HTTPS is important for me, which is why I use MobileMe (as opposed to the hosting provider which I use for my personal web site, which requires additional cost if I want HTTPS, and I already have MobileMe for other reasons).