[rroot]

My only two frustrations with otherwise brilliant Joplin is the sync and (lack of encryption).

Encryption: data isn't encrypted at rest. The author seems to be quite dismissive of the idea: https://github.com/laurent22/joplin/issues/289

But then it's advertised as "end-to-end encryption" but that only refers to data being encrypted while it sits on a sync point. Perhaps within the definition of end-to-end, but might give people the idea that the data is encrypted from the time they enter it.

Sync: I set it to up sync so S3 so I could have mobile and desktop notes in sync.

If I create or edit a quick note, it doesn't get synced automatically! I've set the S3 sync to 5 minutes (the minimum), but you have to press sync after edit.

Last time I looked they were working on a server sync (instead of S3), so hopefully this gets fixed.

[TeMPOraL]

> Encryption: data isn't encrypted at rest. The author seems to be quite dismissive of the idea: https://github.com/laurent22/joplin/issues/289

Skimming the thread, the author does have a good point: this is something that should be handled on the OS level, ideally in a transparent way on top of the filesystem. It makes no sense for every app to be handling securing documents on their own. Perhaps we'll get there one of these days.

[Aeolun]

The OS does do this when you have FDE enabled right?

[TeMPOraL]

Yes, but - as comments bring up - that's an orthogonal issue. The thing here is that the owner of the machine in many cases isn't the same as the owner of the documents - think notes on a family-shared PC, or NGO-provided laptop, etc. Relatedly, there are degrees to protection - the person you want to protect your notes from may be the person you're otherwise willing to grant access to rest of the computer, etc.

What I think should be built into the OS is the ability to secure[0] specific files, or groups of files, on top of FDE. Think, "right click -> Password Protect" to set up, and then when an application tries to access the file, you're prompted for a password. Or, you mount the secured folder as a drive, TrueCrypt-style. I.e. document-level protection controlled by user.

----

[0] - I originally wrote "encrypt", but perhaps OS preventing access is enough in this context if FDE is also enabled.

[kal87]

Joplin's own sync service [1] works seamlessly for me. The basic plan is enough for my needs and is way cheaper than obsidian's sync subscription.

[1] https://joplinapp.org/plans/

[rroot]

That's good news. Does the app sync on exit?

[linuxdaemon]

I thought "yes", but just tested and turns out it's more like "kinda". It doesn't do a full sync on shutdown, but if something is modified it sends a sync push , and that change will get picked up after a few seconds. So if you have a note that you modify, and then allow a few seconds, and then close...That modification will show up on other devices outside of a full sync.

But you can't open joplin, create a note, and then immediately exit and expect the note to show up on other devices. It will still exist on the device it was created on, so it's not lost, it just hasn't synced yet. It will automatically sync the next time you start joplin though.

In my case, I use the vim key bindings, and am so accustomed to hitting "<esc>:w" (which does perform a sync) when I'm finished writing the note, I never noticed.