> the Day One journaling app has had a great sync model that uses Dropbox from the get-go. No custom server needed.
Agreed. Unfortunately, they're not the best example as they then withdrew the "Classic" app from all stores, and released a new app that forces to use their custom sync servers.
They also include really misleading text about the nature of the encryption being used, and whether or not they can read your data.
> In its currently available form, Day One Sync encrypts the data “at rest” on our servers and securely transfers the data from our servers to the Day One app (the same level of security that Dropbox and iCloud provide). Following our 2.0 release, our 2.1 update will provide full end-to-end encryption. Our encryption features will utilize the user’s private key to encrypt all entries before they reach the server. In short, the server will have no access to the user’s unencrypted data. Neither iCloud nor Dropbox currently provide this level of security (see: https://support.apple.com/en-us/HT202303 and https://www.dropbox.com/help/28, respectively), thus making Day One Sync even more secure than these other sync/backup methods.
Translation: We currently encrypt your data after you send it to us, so we can read it. We may offer pre-transmission local encryption in future, and only for our own service, and this makes our service superior to the alternatives that we could (but have chosen not to) offer this level of encryption for too.
So yeah, they're a terrible example to use, unfortunately. Their original app was beautiful too. I didn't get around to buying the Mac app before they withdrew it, so my options are either manually extract my data, or risk giving them a copy (and pay them for the privilege).
Agreed. Unfortunately, they're not the best example as they then withdrew the "Classic" app from all stores, and released a new app that forces to use their custom sync servers.
They also include really misleading text about the nature of the encryption being used, and whether or not they can read your data.
http://help.dayoneapp.com/day-one-sync-faq/
> In its currently available form, Day One Sync encrypts the data “at rest” on our servers and securely transfers the data from our servers to the Day One app (the same level of security that Dropbox and iCloud provide). Following our 2.0 release, our 2.1 update will provide full end-to-end encryption. Our encryption features will utilize the user’s private key to encrypt all entries before they reach the server. In short, the server will have no access to the user’s unencrypted data. Neither iCloud nor Dropbox currently provide this level of security (see: https://support.apple.com/en-us/HT202303 and https://www.dropbox.com/help/28, respectively), thus making Day One Sync even more secure than these other sync/backup methods.
Translation: We currently encrypt your data after you send it to us, so we can read it. We may offer pre-transmission local encryption in future, and only for our own service, and this makes our service superior to the alternatives that we could (but have chosen not to) offer this level of encryption for too.
So yeah, they're a terrible example to use, unfortunately. Their original app was beautiful too. I didn't get around to buying the Mac app before they withdrew it, so my options are either manually extract my data, or risk giving them a copy (and pay them for the privilege).
Massively disappointed in Day One.