Version 4.0.0
After some pondering, procrastinating, planning, and development, LiberaForms now comes with End-to-end encryption built in. Yeah!
This means that form answers are only known by the participating parties. No leaks!
Everything E2EE happens on the client and to acheive that LiberaForms imports OpenPGP.js, a library that fits our needs very well indeed.
As expected, private keys never leave the client and users must take responsibility for the safe keeping their key.
Because the server cannot read a form's encrypted answers, some form features are disabled, like sending confirmation via emails. But a part from that, E2EE integration is seamless. :)
Encryption is enabled on a form to form basis. SysAdmins set the E2EE_MODE to make E2EE either optional, required, or disabled.
Enjoy!