From 0f4fd5a61209aad3e3d8279345e1cc2b075f6d79 Mon Sep 17 00:00:00 2001 From: M66B Date: Wed, 28 Feb 2024 18:45:46 +0100 Subject: [PATCH] Updated FAQ --- FAQ.md | 2 +- index.html | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/FAQ.md b/FAQ.md index 0c24378681..be74621f13 100644 --- a/FAQ.md +++ b/FAQ.md @@ -5342,7 +5342,7 @@ Send is only available in non-Play Store versions of the app (since version 1.19 Password protected content is a simple, yet secure form of end-to-end encryption that requires no configuration. -How to use: select some text by long pressing it, and in the style toolbar at the bottom tap on the *A*-button and select *Password protect* in the pop-up menu. +How to use: select some text by long pressing it, and in the style toolbar at the bottom tap on the padlock-button and select *Password protect* in the pop-up menu. This will replace the selected content with a link that the recipient can click to decrypt the content on a dedicated static web page. Password protected content is sent as a [URI fragment](https://en.wikipedia.org/wiki/URI_fragment) and decrypted in the browser with JavaScript. diff --git a/index.html b/index.html index d371030c73..14ebe48f5f 100644 --- a/index.html +++ b/index.html @@ -2657,7 +2657,7 @@ _submission._tcp SRV 0 1 587 smtp.example.com.

(184) How do I password protect content?

🌎 Google Translate

Password protected content is a simple, yet secure form of end-to-end encryption that requires no configuration.

-

How to use: select some text by long pressing it, and in the style toolbar at the bottom tap on the A-button and select Password protect in the pop-up menu. This will replace the selected content with a link that the recipient can click to decrypt the content on a dedicated static web page.

+

How to use: select some text by long pressing it, and in the style toolbar at the bottom tap on the padlock-button and select Password protect in the pop-up menu. This will replace the selected content with a link that the recipient can click to decrypt the content on a dedicated static web page.

Password protected content is sent as a URI fragment and decrypted in the browser with JavaScript. In other words, protected content is never stored on or seen by third party servers. Since version 1.1990 received protected content will be decrypted by the app, with as fallback decryption in the browser for other email clients.

Password protected content is encrypted with AES / GCM with a 256 bits key derived with PBKDF2 / SHA-512 with 120,000 iterations. With a sufficiently long/complex password, which is communicated to the recipient securely, this is considered safe in 2022 and for the foreseeable future.

Due to length limitations of URLs and Android binder limitations, the maximum content size is 1,500 bytes, which includes HTML formatting tags. Images will be replaced with placeholders to reduce the content size, but other formatting, like bold, italic, links, etc., will be retained. If the content is too long, there will be a popup Text too long.