Custom dictionary words stored in the clear

[mrankine]

The plaintext file Custom Dictionary.txt in the Standard Notes data directory reveals words used in users' private notes.

Words from users' private notes which are unusual enough not to be included in the standard dictionary are probably also more privacy-sensitive than common words. Things like names, places, medications.

Should the custom dictionary file be encrypted?

[arielsvg]

Hey @mrankine, that's a very good point. Unfortunately this is all Electron behavior that we cannot change ourselves in any meaningful way… Warning users that the custom dictionary file is not encrypted may be an option.

[chaserene]

@baptiste-grob this is not the first time I see Standard Notes making a compromise because of the Electron framework's limits.

would it be possible to improve Electron itself, or convince Electron's development to make this possible?

[moughxyz]

We're looking into the feasibility of this..

[moughxyz]

This is now available in 3.12.0 beta: https://github.com/standardnotes/desktop/releases/tag/v3.12.0-beta.1

[mrankine]

Excellent, look forwarding to testing this out in due course. Appreciate it was a non-trivial fix, but I think worthwhile given the privacy impacts. Thanks again!