The answer to that question, taken literally, could fill a novel (so could a description of what’s right with it). As for Firefox Sync, the protocol is byzanti

The answer to that question, taken literally, could fill a novel (so could a description of what’s right with it). As for Firefox Sync, the protocol is byzantine and poorly documented[1], while using it “properly” requires emailing a human at Mozilla to “document expectations and timelines”[2], which for a hobby or small-scale application I read as “fuck you”. (Using it improperly, like filching the API key from one of the official clients, risks tripping the hostile and deliberately undocumented security heuristics.) For me that’s already enough to reject it for anything I couldn’t bear losing (like my passwords). [1] https://www.codejam.info/2021/08/scripting-firefox-sync-lockwise-existing-clients.html https://www.codejam.info/2021/08/scripting-firefox-sync-lock... [2] https://www.codejam.info/2021/08/scripting-firefox-sync-lockwise-complete-oauth.html#a-note-about-client-id-and-redirect-url https://www.codejam.info/2021/08/scripting-firefox-sync-lock...