After some pondering, procrastinating, planning, and development, LiberaForms now comes with End-to-end encryption built in. Yeah!
This means that form answers are only known by the participating parties. No leaks!
Everything E2EE happens on the client and to achieve that LiberaForms imports OpenPGP.js, a library that fits our needs very well indeed.
As expected, private keys never leave the client and users must take responsibility for the safe keeping their key.
Because the server cannot read a form's encrypted answers, some form features are disabled, like sending confirmation via emails. But a part from that, E2EE integration is seamless. :)
Encryption is enabled on a form to form basis. SysAdmins set the E2EE_MODE to make E2EE either optional, required, or disabled.
This version fixes code design (or lack of) that prevented forms with multiple file upload fields from submitting. Thanks to the people who pointed this out to us!
The application interface has been translated to French and the Privacy statement wizard now has a language selector (German included). Translations are much appreciated, thank you!
Other new features are moslty Admin tools.
Also includes some code improvements, and CSS tweaks.