Abstract: Disclosed are various examples for establishing encrypted channels or tunnels within a TCP or other communication session between a tunnel endpoint and tunnel client on a client device. A tunnel client on the client device can determine an encryption level based upon a bundle identifier of the application originating the network traffic, the destination of the network traffic, the category of the application, or other factors.

Abstract: Disclosed are various examples for generating, storing, and loading drawings separate from a file. A request can be received to generate a drawing in a file. A data object can be generated corresponding to the drawing. The data object can include characteristics of the file proximate to an area in the file associated with the drawing. The data object can be stored in a data store associated with the file. A request can be received to open the file. The file can be loaded from the data store. The position of the drawing within the file can be determined based on a stored data object. The file can be rendered including the drawing at the determined position.

Abstract: Disclosed are various examples for generating, storing, and loading references separate from a file. A request can be received to generate a reference for a file. A data object can be generated corresponding to the reference. The data object can include characteristics of the file proximate to an area in the file associated with the reference. The data object can be stored in a data store associated with the file. A request can be received to open the file. The file can be loaded from the data store. The position of the reference within the file can be determined based on a stored data object. The file can be rendered including the reference at the determined position.

Abstract: Examples described herein include systems and methods for performing distributed encryption across multiple devices. An example method can include a first device discovering a second device that shares a network. The device can identify data to be sent to a server and calculate a checksum for that data. The device can then split the data into multiple portions and send a portion to the second device, along with a certificate associated with the server for encrypting the data. The first device can encrypt the portion of data it retained. The first device can receive an encrypted version of the second portion of the data sent to the second device. The first device can merge these two portions and send the merged encrypted data to the server, along with the checksum value. The server can decrypt the data and confirm that it reflects the original set of data.

Abstract: Systems herein allow a content manager to share portions of a document with different groups of users. The system can parse the document into screen shots of each page along with an information bundle that describes how to format content on each page. When a user accesses a document, the system can send the user a permitted portion rather than the entire document. The permitted portion can include one or more screen bundle. The user device can execute an application that reads the information bundle and formats content for display on the user device.

Abstract: Disclosed are various examples for establishing encrypted channels or tunnels within a TCP or other communication session between a tunnel endpoint and tunnel client on a client device. A tunnel client on the client device can determine an encryption level based upon a bundle identifier of the application originating the network traffic, the destination of the network traffic, the category of the application, or other factors.

Abstract: Disclosed are various examples for generating, storing, and loading references separate from a file. A request can be received to generate a reference for a file. A data object can be generated corresponding to the reference. The data object can include characteristics of the file proximate to an area in the file associated with the reference. The data object can be stored in a data store associated with the file. A request can be received to open the file. The file can be loaded from the data store. The position of the reference within the file can be determined based on a stored data object. The file can be rendered including the reference at the determined position.

Abstract: Disclosed are various examples for generating, storing, and loading references separate from a file. A request can be received to generate a reference for a file. A data object can be generated corresponding to the reference. The data object can include characteristics of the file proximate to an area in the file associated with the reference. The data object can be stored in a data store associated with the file. The file and reference can be loaded and rendered. The position of the reference within the file can be determined based on a stored data object.

Abstract: Systems herein include a managed content application that can place markers for conversations within secure documents. A separate social application can serve as the platform for the conversations, allowing for efficient conversations that can occur in real time. The markers can be stored with the documents and identify the conversation, allowing users to retrieve historical conversations that occurred on the social application from within the document. This can allow users to quickly come up to speed without having to rehash the conversations with the original participants. Document security can also be maintained without sacrificing conversation efficiency of the social application.

Abstract: Disclosed are various examples for generating, storing, and loading references separate from a file. A request can be received to generate a reference for a file. A data object can be generated corresponding to the reference. The data object can include characteristics of the file proximate to an area in the file associated with the reference. The data object can be stored in a data store associated with the file. The file and reference can be loaded and rendered. The position of the reference within the file can be determined based on a stored data object.

Abstract: Systems herein allow a content manager to share portions of a document with different groups of users. The system can parse the document into screen shots of each page along with an information bundle that describes how to format content on each page. When a user accesses a document, the system can send the user a permitted portion rather than the entire document. The permitted portion can include one or more screen bundle. The user device can execute an application that reads the information bundle and formats content for display on the user device.