4 ms·
You can also use your own auth server if you want... Just host it on your machines and change the URL in about:config.
by pietroalbini 10y ago
You can also use your own auth server if you want... Just host it on your machines and change the URL in about:config.
- wtbob 10y ago> You can also use your own auth server if you want The problem with that is that if the auth server is on a machine you don't have complete control over (e.g. one hosted by a dedicated-system or VPS provider) then you are trusting that provider to never break into your machine; you are also trusting that machine never to be broken into via some remote exploit. That's far too much trust for a system hosting sensitive data like passwords. The only secure thing is to deploy a system with as little trust as possible.
- pietroalbini 10y agoThen host the auth server locally on your device. The great thing about the self-hosted sync server is, the storage and auth components are separated, and the storage one just stores encrypted blobs. If you want you can trust Mozilla with the authentication part while storing everything where you prefer, but if you're worried about a javascript change set up an auth server locally, create an account in it and copy it on every device you own: since it stores only account details which doesn't change, you don't have to worry about replication.