4 ms·

> What we really need is a fork of Firefox. Step up to the task yourself, then? > and replacing their secure sync with one that drops it all on their servers

by veeti 13y ago

> What we really need is a fork of Firefox. Step up to the task yourself, then? > and replacing their secure sync with one that drops it all on their servers presumably unencrypted as it works with a basic username/password. Firefox Sync is every bit as end-to-end encrypted as it was before. The only difference is that it now comes with a login scheme that is actually usable.

blueskin_ 13y ago
>Step up to the task yourself, then? Because everyone here is an uberprogrammer, right? >Firefox Sync is every bit as end-to-end encrypted as it was before. The only difference is that it now comes with a login scheme that is actually usable. I might have believed that before PRISM. I wouldn't even care about it sitting on Mozilla servers if I could still encrypt it with my own key instead of trusting them. Even if it is encrypted, presumably it is then derived from the user's password. For the average user, that might be 20-30 bits of entropy. Not good. I don't use sync, but if I did, now I essentially need a 2048-bit password to get good encryption on it.
- veeti 13y ago
  > I might have believed that before PRISM. What does this have to do with anything? How is the old sync system any different, then? > Even if it is encrypted, presumably it is then derived from the user's password. For the average user, that might be 20-30 bits of entropy. Not good. The other alternative here is having a sync system that your average user can't even figure out to use. On the other hand, it doesn't take anything away from you. > I don't use sync, but if I did, now I essentially need a 2048-bit password to get good encryption on it. You are confusing key lengths from algorithms like RSA with symmetric algorithms. The keys that are used for encrypting data will be either 128 or 256 bits (haven't checked) and used with some symmetric cipher. Therefore, if you don't trust key stretching to be sufficient with a strong passphrase, you can grab 16 or 32 bytes of randomness, encode it however you wish and use it as a password.
  - blueskin_ 13y ago
    >What does this have to do with anything? How is the old sync system any different, then? The old one let you run your own server. It let you encrypt it with your own key, which you could know was generated from a good entropy source, not been shared, and is store securely. As it is, it's possible the new sync has a backdoor, even one many people at Mozilla don't know. There is also no point in deliberately increasing the attack surface for no reason. >You are confusing key lengths from algorithms like RSA with symmetric algorithms. The keys that are used for encrypting data will be either 128 or 256 bits (haven't checked) and used with some symmetric cipher. I may be wrong, but I thought the old sync used an RSA key as it's used for authenticating the user as well as actually saving/accessing the data (probably symmetric for the actual storage, with the key encrypted using the RSA key).
    - veeti 13y ago
      > The old one let you run your own server. https://docs.services.mozilla.com/howtos/run-sync-1.5.html https://docs.services.mozilla.com/howtos/run-sync-1.5.html > It let you encrypt it with your own key Huh? No, it didn't. The key was generated automatically by the client just like it is now. > As it is, it's possible the new sync has a backdoor, even one many people at Mozilla don't know. How do you know the old one didn't? You have to trust Mozilla at some point. What if the client generates bad encryption keys on purpose, or so on? > I may be wrong, but I thought the old sync used an RSA key as it's used for authenticating the user as well as actually saving/accessing the data (probably symmetric for the actual storage, with the key encrypted using the RSA key). RSA keys were scrapped from the system a long time ago as they provided no benefit.
      - blueskin_ 13y ago
        >Huh? No, it didn't. The key was generated automatically by the client just like it is now. >What if the client generates bad encryption keys on purpose, or so on? Fair enough, I never used it, but I was under the impression the user could generate their own, even if just as an option. >RSA keys were scrapped from the system a long time ago as they provided no benefit. Exactly the problem. The benefit is invisible to (most) endusers, so in Mozilla logic, it doesn't exist for the user.

by veeti 13y ago

blueskin_ 13y ago

>Step up to the task yourself, then? Because everyone here is an uberprogrammer, right? >Firefox Sync is every bit as end-to-end encrypted as it was before. The only difference is that it now comes with a login scheme that is actually usable. I might have believed that before PRISM. I wouldn't even care about it sitting on Mozilla servers if I could still encrypt it with my own key instead of trusting them. Even if it is encrypted, presumably it is then derived from the user's password. For the average user, that might be 20-30 bits of entropy. Not good. I don't use sync, but if I did, now I essentially need a 2048-bit password to get good encryption on it.

veeti 13y ago
> I might have believed that before PRISM. What does this have to do with anything? How is the old sync system any different, then? > Even if it is encrypted, presumably it is then derived from the user's password. For the average user, that might be 20-30 bits of entropy. Not good. The other alternative here is having a sync system that your average user can't even figure out to use. On the other hand, it doesn't take anything away from you. > I don't use sync, but if I did, now I essentially need a 2048-bit password to get good encryption on it. You are confusing key lengths from algorithms like RSA with symmetric algorithms. The keys that are used for encrypting data will be either 128 or 256 bits (haven't checked) and used with some symmetric cipher. Therefore, if you don't trust key stretching to be sufficient with a strong passphrase, you can grab 16 or 32 bytes of randomness, encode it however you wish and use it as a password.
- blueskin_ 13y ago
  >What does this have to do with anything? How is the old sync system any different, then? The old one let you run your own server. It let you encrypt it with your own key, which you could know was generated from a good entropy source, not been shared, and is store securely. As it is, it's possible the new sync has a backdoor, even one many people at Mozilla don't know. There is also no point in deliberately increasing the attack surface for no reason. >You are confusing key lengths from algorithms like RSA with symmetric algorithms. The keys that are used for encrypting data will be either 128 or 256 bits (haven't checked) and used with some symmetric cipher. I may be wrong, but I thought the old sync used an RSA key as it's used for authenticating the user as well as actually saving/accessing the data (probably symmetric for the actual storage, with the key encrypted using the RSA key).
  - veeti 13y ago
    > The old one let you run your own server. https://docs.services.mozilla.com/howtos/run-sync-1.5.html https://docs.services.mozilla.com/howtos/run-sync-1.5.html > It let you encrypt it with your own key Huh? No, it didn't. The key was generated automatically by the client just like it is now. > As it is, it's possible the new sync has a backdoor, even one many people at Mozilla don't know. How do you know the old one didn't? You have to trust Mozilla at some point. What if the client generates bad encryption keys on purpose, or so on? > I may be wrong, but I thought the old sync used an RSA key as it's used for authenticating the user as well as actually saving/accessing the data (probably symmetric for the actual storage, with the key encrypted using the RSA key). RSA keys were scrapped from the system a long time ago as they provided no benefit.
    - blueskin_ 13y ago
      >Huh? No, it didn't. The key was generated automatically by the client just like it is now. >What if the client generates bad encryption keys on purpose, or so on? Fair enough, I never used it, but I was under the impression the user could generate their own, even if just as an option. >RSA keys were scrapped from the system a long time ago as they provided no benefit. Exactly the problem. The benefit is invisible to (most) endusers, so in Mozilla logic, it doesn't exist for the user.