7 ms·
> The data you submit is encrypted in Firefox and not decrypted until it is on a server that is not connected to the wider internet. Okay, stupid question: How
by joombaga 8y ago
> The data you submit is encrypted in Firefox and not decrypted until it is on a server that is not connected to the wider internet.
Okay, stupid question: How does it get there? Sneakernet?
- Frye 8y agoIt gets there encrypted via the internet
- jgtrosh 8y agoNot directly connected to the wider internet ? As in not referenced by DNS, but connected to machines which are ?
- kemitche 8y agoEither sneakernet, or the server is disconnected before the private key is attached, I assume. But sneakernet makes the most sense to me.
- scrollaway 8y agoUser's computer => Encrypted => Sent over the internet => Mozilla's public servers => Mozilla intranet gateway => Mozilla non-internet-facing server => Decrypted here It doesn't say the server is completely offline. It can be connected to through a server which can connect to both that server and the wider internet, but the machine in question cannot.
- mygo 8y agohopefully the server connected to the wider internet can only receive from the wider internet and not send anything to the wider internet. Otherwise it can just be used as a proxy to the server that’s not connected to the internet.
- joombaga 8y agoHmm. If I was describing a server behind a bastion host I'd feel dishonest saying it's "not connected to the wider internet".
- bashinator 8y agoI agree. A more honest and accurate way of putting it would be, “not accessible from the wider Internet.” On the other hand, with immutable servers, giving them no route to the wider Internet actually could be possible.
- Gaelan 8y agoEncrypted data is uploaded to some Mozilla server. From there, the the encrypted data is copied onto some sort of storage device (USB stick or DVD), which is then inserted into the non-connected machine where it is decrypted.
- Gaelan 8y agoCan't edit, but should add that this is speculation
- _verandaguy 8y agoMost likely they mean that it only gets decrypted after going through a bastion-like host that's connected to both the internet and one of their intranets. A sneakernet would be an option but it's fairly unlikely
- joombaga 8y agoHmm. If I was describing a server behind a bastion host I'd feel dishonest saying it's "not connected to the wider internet".
- CubicsRube 8y agoYou will send your data to publicly available server, which will forward it to other server available only through local network, hidden from the prying eyes, secured by firewall, routers, and/or some network configuration.
- benatkin 8y agoIt could store it on a network filesystem. The computer that writes it would be connected to the internet, and the computer that reads it would not. Or it could store it in a database.
- hartator 8y ago> Okay, stupid question: How does it get there? Sneakernet? Homing pigeon.
- deleted 8y ago[deleted]
- walid 8y agoYou're right. It's a stupid question. What are you doing on Hacker News?
- dang 8y agoPersonal attacks will get you banned here. Please don't do this again. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html