[buug] The new Firefox Sync: still secure?

Ian Zimmerman itz at buug.org
Wed Mar 11 19:44:34 PDT 2015


This article [1] describes how the client data was protected in Firefox
Sync.  However, it seems to apply only to the old Sync (aka Weave).  The
new Sync, as seen in Firefox after version 29, doesn't ask for a
passphrase, so does that mean bookmark data is stored on Mozilla servers
in clear?  I am unable to find any information about that on Mozilla's
site (which has gone all the way to Web 2.0 aka zero information 100%
slickness).

I am trying to decide if I really need to write my own bookmark sync
program :-(

[1]

https://wiki.mozilla.org/Labs/Weave/Developer/Crypto

-- 
Please *no* private copies of mailing list or newsgroup messages.
Rule 420: All persons more than eight miles high to leave the court.
Local Variables:
mode:claws-external
End:



More information about the buug mailing list