Bookmarks store message snippets, sender names, and space names in plaintext in IndexedDB.
cachedPreview: {
senderName: string; // display name at bookmark time
textSnippet: string;
sourceName: string; // "Space Name > #channel"
}
Already encrypted when synced to network, but plaintext locally.
Risk is LOW - requires IndexedDB access (XSS or physical).
Bookmarks are capped at 200 and loaded into memory anyway, so encryption cost would be minimal.
Should we encrypt locally for defense-in-depth, or acceptable as-is?
@CassOnMars