> Wouldn't EKE require the other computer you're syncing to to be online? It would, yes. With Firefox Sync you have two choices, either exchange keys or type i

> Wouldn't EKE require the other computer you're syncing to to be online? It would, yes. With Firefox Sync you have two choices, either exchange keys or type in the key. I carry the key around in my wallet, so I don't think that's a big deal. > And encryption in Javascript is a pain, since you open yourself to man-in-the-middle attacks and such. SSL helps a lot here. I think uTorrent 3's remote web-accessible UI stuff does something like this, actually. edit: yeah, it generates a key on the client so the server never has access and uses SRP [1] to authenticate and exchange the key [2]. [1] https://secure.wikimedia.org/wikipedia/en/wiki/Secure_Remote_Password_protocol https://secure.wikimedia.org/wikipedia/en/wiki/Secure_Remote... [2] http://www.utorrent.com/legal/web-beta-privacy http://www.utorrent.com/legal/web-beta-privacy