4 ms·
>Can you elaborate on this? What do you mean by 'protected' and 'high entropy key'? I can't be sure, but I believe GP is referring to how Firefox Sync original
by bscphil 9y ago
>Can you elaborate on this? What do you mean by 'protected' and 'high entropy key'?
I can't be sure, but I believe GP is referring to how Firefox Sync originally encrypted all the data locally with a long key before uploading it to Mozilla servers. To sync your data onto a new device you would have to transfer the key, which was done by generating a 16 char temporary password at one end, and then typing it at the other. Your private key data would then be sent, encrypted, to the new device.
At some point, if memory serves, Mozilla decided this was too complicated for ordinary users, and now only stores your sync data protected by whatever password you type in - which is going to be potentially brute-forceable.
- staticassertion 9y agoGot it - thanks, that's interesting. I'll probably check out how that worked.