MLO Cloud or Wifi-SYNC? Privacy concerns

[Mike K.]

I'm a bit worried to store all my tasks in the MLO Cloud. 

I don't have any top secret files, but I'm unconfortable by the fact that these tasks are stored unencrypted. 

I've tried to use Wifi-Sync only for a couple of days, but that's a bit of a hassle because of changing IP addresses.

Are there any plans to encrypt the cloud storage in the future? 

How do you  feel about this? 

[Alyona (MLO Support)]

We are using HTTPS for secure connection to the cloud and the infrastructure of the cloud stored on Amazon Web Services located in USA. It is quite robust and secure. The price you pay for the sync is also invested to cloud performance, stability and security.

The level of our cloud security is the same at the moment as Gmail for example which does not encrypt your emails as well.

[Stéph]

I use WiFi sync, mostly for similar reasons to you.  One thing which helps is that I only sync my file when I'm at home, where I have set up static IP addresses for my devices. This means my desktop gets recognised next time I sync.

It would be good to have the Wi-Fi sync remember your device name or some unique ID in the MLO file, rather than looking for a constant IP address.

Stéphane

[Mike K.]

I might do the same thing. It's a shame that Wifi-sync only allows syncing with 1 mobile device. Currently I use 3 devices. (Laptop / iPad  / iPhone). 

Maybe I'll create 2 profiles. 1 cloud profile with some general routine tasks and 1 Wifi-sync profile with some more personal todo's. 

Op maandag 11 juni 2018 19:03:59 UTC+2 schreef Stéph:

[Mike K.]

Well... on Google Drive / Gmail I can enable 2 factor authentication as a second security layer. Would be nice if you would also support something like this.

Op maandag 11 juni 2018 16:52:18 UTC+2 schreef Alyona (MLO Support):

[imajeff]

Since https does encrypt your tasks over Internet, what kind of attack are you worried about? And since they use Amazon services it seems it might be encrypted on the server storage too, and otherwise securely protected by a very large and resourseful company.

[Mike K.]

Data is not encrypted. Also using AWS does not mean it can't be hacked.

Maybe I should be less paranoid about this. I know that most task managers do not encrypt data at rest. 

(As far as I know only Omnifocus does this. I also own a copy of Omnifocus, but I prefer to use MLO because that's more powerful).

Op maandag 11 juni 2018 23:14:02 UTC+2 schreef imajeff:

[imajeff]

How are you verifying whether data is encrypted? I could only guess by what MLO says

If it is done on a computer, it can be hacked (no matter how strong the encryption)