Should there be a delete all.drafts button ?

[krishnaverma]

Currently , when any use previews or posts a PM , it is automatically saved as drafts. Now even if you delete the message from outbox, the content of.the message will.be saved as draft. Currently, there is no option for a bitcointalk member to be able to delete drafts. This.means that if your account is compromised , your deleted messages content can be exposed. Do you.think.there should be a delete all drafts feature to prevent this ?

[Vod]

Do you.think.there should be a delete all drafts feature to prevent this ?

Gmail has it.  Great idea!

[PX-Z]

I don't know PM have drafts and saved on the same place (draft page).

Even though there is 7 day expiry of the drafts, this option/feature is good to consider for privacy reasons knowing draft PMs are save there.

[SilverCryptoBullet]

It's good idea for privacy but I honestly don't know that deleted PMs will be stored in a draft page temporarily.

There are more information about PMs and how PMs stored as well as deleted. You can proactively delete your PMs, clean your draft page (if the forum has this feature in the future) but your PMs will be stored in PM receivers too.
https://bitcointalk.org/privacy.php

Thing	Retention	Possible user actions to maximize privacy
_________	__________________________________	_______________________________________________________________________________ ______
PMs	Until the sender and all recipients delete the PM, plus about 6 months	Always encrypt sensitive PMs. Regularly delete old incoming and outgoing PMs so that they don't linger in our database longer than necessary. Note also that PMs are often emailed in cleartext to the recipients by bitcointalk.org.
_________	__________________________________	_______________________________________________________________________________ ______

[krishnaverma]

PM being present in receivers inbox is not a big issue because if you delete a PM and then also drafts, no one can see the message if your account is compromised. There is very less chance that the hacker can gain access to receiver account as well to see the same message.

The probability of one account getting compromised and the hacker being able to see the deleted messages through drafts is much higher.

[noorman0]

It's good idea for privacy but I honestly don't know that deleted PMs will be stored in a draft page temporarily.

That's not what he meant.
If you press preview before sending a PM, the content of your message will be saved in the post draft. Just tested it, and it's true. I support this proposal; other suggestions, add a separate draft space or just exclude the draft holding the outbox content preview.

[krishnaverma]

It's good idea for privacy but I honestly don't know that deleted PMs will be stored in a draft page temporarily.

That's not what he meant.
If you press preview before sending a PM, the content of your message will be saved in the post draft. Just tested it, and it's true.

To add to it, even if you do not click preview. And just send any message, it is saved in drafts. Suppose you shared something private and that message and delete it later, it will still be present in drafts for 7 days and there is currently no option to clear that message in drafts.

[LoyceV]

I think you're trying to solve a problem that doesn't exist. If you're worried about your account getting compromised, improve your account (and system) security. If you're worried about someone reading your deleted PM, you shouldn't have sent it unencrypted in the first place. Even without compromising your account, Cloudflare can read anything you send. But if you really want to delete your Drafts, just click "Preview" 100 times

[krishnaverma]

But if you really want to delete your Drafts, just click "Preview" 100 times

Does that sound practical ? The forum also has some responsibility. You cannot give all the responsibility for security on the user.

Like there are replies above from members who are using forum for years and they are not aware that PM are saved as drafts. The forum does not inform users while creating a new message that they are saved in drafts. The drafts feature was just announced ina thread which most would not have even looked at.

[EarnOnVictor]

Currently , when any use previews or posts a PM , it is automatically saved as drafts. Now even if you delete the message from outbox, the content of.the message will.be saved as draft. Currently, there is no option for a bitcointalk member to be able to delete drafts. This.means that if your account is compromised , your deleted messages content can be exposed. Do you.think.there should be a delete all drafts feature to prevent this ?

As much as I wish Bitcointalk had all functions, just know that it can't be 100% private.

For this, advice: a message that you take so dearly to protect to the point that deleting it from the Outbox is not enough, and still want to delete it further elsewhere, should be entirely avoided from being discussed on the forum. You guys could go to external communication channels like Telegram to discuss such.

[libert19]

...Like there are replies above from members who are using forum for years and they are not aware that PM are saved as drafts. The forum does not inform users while creating a new message that they are saved in drafts. The drafts feature was just announced ina thread which most would not have even looked at.

It's mentioned here though: https://talkimg.com/image/UES8Id

[LoyceV]

But if you really want to delete your Drafts, just click "Preview" 100 times

Does that sound practical ?

Not really, but it's more realistic than expecting the forum to add a "Delete" button for such a rare request.

The forum also has some responsibility. You cannot give all the responsibility for security on the user.

Sure you can. Each PM you send, has this disclaimer:

Note: PM privacy is not guaranteed. Encrypt sensitive messages.

The forum does not inform users while creating a new message that they are saved in drafts.

That's a good point. Under each post, I see this:

Click preview to save a draft.

It would make sense to also add that under PMs.

[krishnaverma]

But if you really want to delete your Drafts, just click "Preview" 100 times

Does that sound practical ?

Not really, but it's more realistic than expecting the forum to add a "Delete" button for such a rare request.

The forum also has some responsibility. You cannot give all the responsibility for security on the user.

Sure you can. Each PM you send, has this disclaimer:

Note: PM privacy is not guaranteed. Encrypt sensitive messages.

The forum does not inform users while creating a new message that they are saved in drafts.

That's a good point. Under each post, I see this:

Click preview to save a draft.

It would make sense to also add that under PMs.

Something like this under PM
" When you click preview or send a message, it is saved as draft " with draft hyperlinked to respective page .

[Upgrade00]

A note could be added under PMS when writing then but it prevents a highly unlikely data breach option. Your account has to be compromised within a 7 day period that you sent a and deleted a pm from your outbox and the hacker specifically knows to check your draft for certain information that they did not know was there to start with.

Except this is an very easy fix for the admins to do, it's probably not worth the effort.

[LoyceV]

Your account has to be compromised within a 7 day period that you sent a and deleted a pm from your outbox

I've seen cases in which a compromised account sent a malicious PM, and deleted it from the outbox. The password wasn't changed so it wouldn't draw attention. In this case the drafts could even be used to find back what was sent. But again, this is a very rare scenario and I won't be checking my drafts for unexpected messages on a daily basis.

[Doan9269]

If the draft section has the capacity of containing only about 100 drafts post, then I don't think we need to worry ourselves on how we could get rid of some when they can be automatically deleted after the maximum of 100 has been reached on the draft section, moreover, the draft is only possible when we preview the content before posting it.

[Upgrade00]

I've seen cases in which a compromised account sent a malicious PM, and deleted it from the outbox. The password wasn't changed so it wouldn't draw attention. In this case the drafts could even be used to find back what was sent. But again, this is a very rare scenario and I won't be checking my drafts for unexpected messages on a daily basis.

I vaguely remember this case, happened a couple of years ago and even if it didn't play out with the drafts being checked it shows how they can be useful in some cases. This makes me more convinced that theymos doesn't really need to change anything except it's an easy fix to add a new memo there.

[krishnaverma]

moreover, the draft is only possible when we preview the content before posting it.

Not true. If you just send a message without previewing it, it will still be saved in drafts .

[Doan9269]

moreover, the draft is only possible when we preview the content before posting it.

Not true. If you just send a message without previewing it, it will still be saved in drafts .

Thanks for your observation as well as correction, my bad anyway, because I was referring to the draft in posting and not that of the PM that concerns the message received, I guess maybe my attention got diverted along the line, but I get your point clearly, there should be a button to prompt deleting all draft PMs, this is going to be an interesting feature if considered by the forum.

[The Cryptovator]

Currently , when any use previews or posts a PM , it is automatically saved as drafts. Now even if you delete the message from outbox, the content of.the message will.be saved as draft. Currently, there is no option for a bitcointalk member to be able to delete drafts. This.means that if your account is compromised , your deleted messages content can be exposed. Do you.think.there should be a delete all drafts feature to prevent this ?

If you are concerned about privacy then you have to avoid sending forum messages to any other users. It's not encrypted; your message could be read by a moderator if someone reports it simply. Let's say you sent a PM to me and I report to admins; then it will be visible for them to handle it. So the idea won't prevent your privacy at all. Since it's been deleted within 7 days, I think it doesn't matter for PM. For the post it's public, so it doesn't matter of concern. If you really care about privacy, then send encrypted messages. Because the forum has already declared your privacy.

Note: PM privacy is not guaranteed. Encrypt sensitive messages.