aboutsummaryrefslogtreecommitdiffstats
path: root/README.md
diff options
context:
space:
mode:
authorDominik Schürmann <dominik@dominikschuermann.de>2012-12-14 18:22:03 +0100
committerDominik Schürmann <dominik@dominikschuermann.de>2012-12-14 18:22:03 +0100
commitbe4e3a10b008dfb33caf593b6e68bb7018c2a41c (patch)
tree781e16e6964cc2482f9eeac7e123659b5bafded8 /README.md
parent2dcaad3d3b6f8757f01e4abd2295431f24cdfed5 (diff)
downloadopen-keychain-be4e3a10b008dfb33caf593b6e68bb7018c2a41c.tar.gz
open-keychain-be4e3a10b008dfb33caf593b6e68bb7018c2a41c.tar.bz2
open-keychain-be4e3a10b008dfb33caf593b6e68bb7018c2a41c.zip
AIDL API changes
Diffstat (limited to 'README.md')
-rw-r--r--README.md19
1 files changed, 10 insertions, 9 deletions
diff --git a/README.md b/README.md
index ec38a7e09..86be161c6 100644
--- a/README.md
+++ b/README.md
@@ -62,11 +62,15 @@ See http://docs.oseems.com/general/application/eclipse/fix-gc-overhead-limit-exc
## Basic goals
-* Never (even with permissions) give out actual PGPSecretKey/PGPSecretKeyRing blobs
* Intents without permissions should only work based on user interaction (e.g. click a button in a dialog)
Android primitives to exchange data: Intent, Intent with return values, Send (also an Intent), Content Provider, AIDL
+## Permission
+
+* ACCESS_API: Encrypt/Sign/Decrypt/Create keys without user interaction (intents, remote service), Read key information (not the actual keys)(content provider)
+* ACCESS_KEYS: get and import actual public and secret keys (remote service)
+
## Intents
### Without permission
@@ -92,16 +96,13 @@ Android primitives to exchange data: Intent, Intent with return values, Send (al
## Content Provider
* The whole content provider requires a permission (only read)
-* Don't give out blobs
+* Don't give out blobs (keys can be accessed by ACCESS_KEYS via remote service)
* Make an internal and external content provider (or pathes with <path-permission>)
* Look at android:grantUriPermissions especially for ApgServiceBlobProvider
* Only give out android:readPermission
-## Remote Service
-
-* The whole service requires the permission ACCESS_API
-
-## Resulting permission
+## ApgApiService (Remote Service)
+* ACCESS_API
-* READ_KEY_DATABASE: Read key information (not the actual keys)(content provider)
-* ACCESS_API: Encrypt/Sign/Decrypt/Create keys without user interaction (intents, remote service) \ No newline at end of file
+## ApgKeyService (Remote Service)
+* ACCESS_KEYS \ No newline at end of file