4 ms·

Mozilla Persona is federated, so the BrowserId service is provided by the email provider. Mozilla provide a fallback service, in case your email provider hasn't

by tlocke 13y ago

Mozilla Persona is federated, so the BrowserId service is provided by the email provider. Mozilla provide a fallback service, in case your email provider hasn't set one up. So just pick an email provider in the country of your choice. There's another misunderstanding in the post: > Then NSA would have access to basically 40% of a user's > browsing history, including URLs, the email address used, > and time of visit. As I understand it, Persona doesn't 'phone home' each time authentication is required. It's intended that the browser authenticates you from its cache, and only refers back to the Persona server from time to time, and doesn't tell the Persona server anything about the sites you've been visiting etc.

workhere-io 13y ago
> Mozilla Persona is federated, so the BrowserId service is provided by the email provider. Mozilla provide a fallback service, in case your email provider hasn't set one up. So just pick an email provider in the country of your choice. The way it currently works is that when you want to log in, a pop-up window from persona.org is opened. This would make Persona able to collect data (which I don't think they're doing, but NSA could force them to). > As I understand it, Persona doesn't 'phone home' each time authentication is required I'm not an expert on the inner workings of Persona, but with the way Persona currently works it actually does fetch JS from the Persona servers on each page load. Try logging in on http://personaexamples.workhere.io/ http://personaexamples.workhere.io/ and reload the page a couple of times while checking in Firebug / Chrome Developer Tools which JS files are loaded.
- dochtman 13y ago
  That's a (temporary) bug, not a feature: https://github.com/mozilla/browserid/issues/3119 https://github.com/mozilla/browserid/issues/3119
- tlocke 13y ago
  You can self-host the js files wherever you like. It's not recommended that you do because Persona is still evolving. However the point is that the protocol is completely decentralized. By the way, as a plug, I've implemented it on my site http://www.polifesto.com/ http://www.polifesto.com/
  - workhere-io 13y ago
    > You can self-host the js files wherever you like Sure, but those files would still open the persona.org pop-up, AFAIK (until Persona has been implemented directly in the browser). So until then persona.org could theoretically gather data.
    - tlocke 13y ago
      You're right that while the protocol is decentralized, the implementations aren't yet. Btw, I don't want to sound negative about your article, we're both fans of Persona and I'm really pleased you're talking about it :-)
    - AndrewDucker 13y ago
      Any signs of Persona being implemented in the browser?
      - workhere-io 13y ago
        Not sure, but the good news is that the current method in itself works great.
      - callahad 13y ago
        Firefox OS includes pseudo-native implementation, with some work still getting farmed out to persona.org. Ozten and Jedp are working on the beginnings of truly native support in desktop Firefox. We've held off on pushing too far in that direction while we toyed with the API and data formats, but things seem to be shaping up.
        mpyne 13y ago
        If you guys get it stabilized and working I wouldn't mind helping get Konq to support it (time permitting, of course).
  - deleted 13y ago
    [deleted]

by tlocke 13y ago

workhere-io 13y ago

> Mozilla Persona is federated, so the BrowserId service is provided by the email provider. Mozilla provide a fallback service, in case your email provider hasn't set one up. So just pick an email provider in the country of your choice. The way it currently works is that when you want to log in, a pop-up window from persona.org is opened. This would make Persona able to collect data (which I don't think they're doing, but NSA could force them to). > As I understand it, Persona doesn't 'phone home' each time authentication is required I'm not an expert on the inner workings of Persona, but with the way Persona currently works it actually does fetch JS from the Persona servers on each page load. Try logging in on http://personaexamples.workhere.io/ http://personaexamples.workhere.io/ and reload the page a couple of times while checking in Firebug / Chrome Developer Tools which JS files are loaded.

dochtman 13y ago
That's a (temporary) bug, not a feature: https://github.com/mozilla/browserid/issues/3119 https://github.com/mozilla/browserid/issues/3119
tlocke 13y ago
You can self-host the js files wherever you like. It's not recommended that you do because Persona is still evolving. However the point is that the protocol is completely decentralized. By the way, as a plug, I've implemented it on my site http://www.polifesto.com/ http://www.polifesto.com/
- workhere-io 13y ago
  > You can self-host the js files wherever you like Sure, but those files would still open the persona.org pop-up, AFAIK (until Persona has been implemented directly in the browser). So until then persona.org could theoretically gather data.
  - tlocke 13y ago
    You're right that while the protocol is decentralized, the implementations aren't yet. Btw, I don't want to sound negative about your article, we're both fans of Persona and I'm really pleased you're talking about it :-)
  - AndrewDucker 13y ago
    Any signs of Persona being implemented in the browser?
    - workhere-io 13y ago
      Not sure, but the good news is that the current method in itself works great.
    - callahad 13y ago
      Firefox OS includes pseudo-native implementation, with some work still getting farmed out to persona.org. Ozten and Jedp are working on the beginnings of truly native support in desktop Firefox. We've held off on pushing too far in that direction while we toyed with the API and data formats, but things seem to be shaping up.
      - mpyne 13y ago
        If you guys get it stabilized and working I wouldn't mind helping get Konq to support it (time permitting, of course).
- deleted 13y ago
  [deleted]