[cmurf]

All the technical stuff is for the security and IT folks employed by media companies, like Associated Press. The journalist would get a loaner laptop equipped with this SecureDrop workstation from their org, this is not a do it yourself thing.

I suspect you could have security levels, depending on your work and preferences. I could see journalists out in the field without reliable internet, so they need persistence for their working files. Others probably can rely on secure connections, so nothing need be persistent.

In any case, I'd want a very straightforward "burn" feature that obliterates persistent working files.

I already expect that history and cache and swap are not persistent, but as history can be ready useful as part of working files I might want an option how to handle it. Case by case.