3 ms·

So now I need to give them my email address plus remember yet another password for sync? Do not want. I always thought the old model with the sync keys was pret

by morsch 13y ago

So now I need to give them my email address plus remember yet another password for sync? Do not want. I always thought the old model with the sync keys was pretty sweet. Is the synced data end-to-end encrypted? It better be!

dewey 13y ago
In times of free and secure password managers "remembering passwords" should really be a non-issue.
- dingdingdang 13y ago
  Let's just plug KeyPass here since its open source and brilliant: http://keepass.info/ http://keepass.info/ Also for the linux and co (incl osx & win too actually) users: https://www.keepassx.org/news/ https://www.keepassx.org/news/
dingaling 13y ago
You can run your own Firefox sync server, but it's a pain to implement. http://docs.services.mozilla.com/howtos/run-sync.html http://docs.services.mozilla.com/howtos/run-sync.html Once it's up and running, though, it's seamless. Edit: Hmm. Looks like they're happy to break this: " Some unknown proportion of the user base uses their own Sync servers ... [Asa] I don't think we should worry too much about this group. If we can identify them and message them that'd be sufficient for my concerns." https://services.etherpad.mozilla.org/sync-migration https://services.etherpad.mozilla.org/sync-migration Well, thanks. Here's a code-dump of the new Firefox Account server. Not sure yet if I can implement this: https://github.com/mozilla/fxa-auth-server https://github.com/mozilla/fxa-auth-server
- reedlaw 13y ago
  That's not a very reassuring attitude. Hopefully the new Firefox Accounts authentication server will be easy enough to deploy and configure as an alternative to private Sync servers.
veeti 13y ago
> Is the synced data end-to-end encrypted? Yes.
Yoric 13y ago
Unfortunately, according to our research, an enormous majority of people (read 95%+) hated it. So we had to switch to something less surprising, but that most users [believe that they] understand. Sad but necessary.

by morsch 13y ago

dewey 13y ago

In times of free and secure password managers "remembering passwords" should really be a non-issue.

dingdingdang 13y ago
Let's just plug KeyPass here since its open source and brilliant: http://keepass.info/ http://keepass.info/ Also for the linux and co (incl osx & win too actually) users: https://www.keepassx.org/news/ https://www.keepassx.org/news/

dingaling 13y ago

You can run your own Firefox sync server, but it's a pain to implement. http://docs.services.mozilla.com/howtos/run-sync.html http://docs.services.mozilla.com/howtos/run-sync.html Once it's up and running, though, it's seamless. Edit: Hmm. Looks like they're happy to break this: " Some unknown proportion of the user base uses their own Sync servers ... [Asa] I don't think we should worry too much about this group. If we can identify them and message them that'd be sufficient for my concerns." https://services.etherpad.mozilla.org/sync-migration https://services.etherpad.mozilla.org/sync-migration Well, thanks. Here's a code-dump of the new Firefox Account server. Not sure yet if I can implement this: https://github.com/mozilla/fxa-auth-server https://github.com/mozilla/fxa-auth-server

reedlaw 13y ago
That's not a very reassuring attitude. Hopefully the new Firefox Accounts authentication server will be easy enough to deploy and configure as an alternative to private Sync servers.

veeti 13y ago

> Is the synced data end-to-end encrypted? Yes.

Yoric 13y ago

Unfortunately, according to our research, an enormous majority of people (read 95%+) hated it. So we had to switch to something less surprising, but that most users [believe that they] understand. Sad but necessary.