Hacker GitHub

← All repos

mozilla/fxa-auth-server

View on GitHub ↗ ★ 397 JavaScript archived

DEPRECATED - Migrated to https://github.com/mozilla/fxa

19 mentions on Hacker News by 19 people: 3 stories, 16 comments · first 2014-02-03 · latest 2023-11-24

Mentions per year 19 mentions · busiest year 2014 (10)
20082026
AllStoriesComments NewestTopOldest
  1. …sync uses end-to-end encryption: https://support.mozilla.org/en-US/kb/how-firefox-sync-keeps-... , https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... . There's nothing mandatory about the initial shortcuts - just remove them.…
    comment by mkl · 2023-11-24 · in Chrome pushes forward with plans to limit ad blockers in the future
  2. …difficult. This is effectively the scheme we used on Firefox Accounts to protect the Sync password: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... . Also note: don't use different PBKDF round counts as a distinguisher,…
    comment by lotharrr · 2021-02-26 · in Show HN: Doppler Share – Share one-off secrets with end-to-end encryption
  3. …it is possible to use Mozillas account server. Also, from the description of the protocol ( https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... ) it was not clear to me, what exactly is encrypted? Only the passwords? I had the…
    comment by beatle_sauce · 2018-11-14 · in Private by Design: How We Built Firefox Sync
  4. Yes, sort of (more about the process: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... ). Key difference: you don't need to sync all the data up again, since there's a separate key for that, which doesn't change. That said,…
    comment by yoklov · 2018-11-14 · in Private by Design: How We Built Firefox Sync
  5. …that Mozilla's server don't have. You can find more about how sign-in and key management works in https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
    comment by firefox-lockbox · 2018-07-11 · in Firefox Lockbox
  6. …they are encrypted on the client. https://blog.mozilla.org/services/2014/04/30/firefox-syncs-n... https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
    comment by sciurus · 2018-07-10 · in Firefox Lockbox
  7. We do :) The full details are at https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... , but basically we derive two separate keys: one for authentication, that gets sent over the wire, and a completely different one for…
    comment by callahad · 2017-11-14 · in Firefox 57.0 Released
  8. …your objection isn't about the protocol, but its implementation (e.g. usage of HTML/Javascript): https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... > you download the browser once That's not true. Modern browsers are set to…
    comment by bad_user · 2016-07-18 · in Google will use Chrome browsing data for ad tailoring
  9. …https://blog.mozilla.org/services/2014/02/07/a-better-firefo... https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... Edit: From what I can see, client side encryption in Google Chrome appears to be opt-in?
    comment by Excavator · 2015-11-26 · in Firefox: We Don't Need Google's Money Any More
  10. ▲ 4
    New Firefox Sync protocol for Firefox Accounts
    story by JoshTriplett · 2014-05-03 · 1 comment
  11. ▲ 1
    Firefox Accounts using remote server as source of randomness
    story by gioi · 2014-05-01 · 1 comment
  12. …But yes, it is more dependent on the strength of your password than the previous sync system. [1] https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
    comment by rfk · 2014-04-29 · in Firefox and Flux: A New, Beautiful Browser is Coming
  13. …thanks. Here's a code-dump of the new Firefox Account server. Not sure yet if I can implement this: https://github.com/mozilla/fxa-auth-server
    comment by dingaling · 2014-03-21 · in Firefox 29 beta arrives with easy Sync tool....
  14. …cannot read this data, but can attempt a brute-force dictionary attack against the password. - https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... We do not yet know which data will be assigned to which category by default, but…
    comment by comex · 2014-02-09 · in A Better Firefox Sync
  15. …protocol document is (linked in the article) has a lot of interesting details about the new system: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
    comment by magicalist · 2014-02-08 · in A Better Firefox Sync
  16. …my devices can use. You'd imagine it would be available with it being Mozilla, right? Edits: YES! https://github.com/mozilla/fxa-auth-server
    comment by chippy · 2014-02-08 · in Introducing Mozilla Firefox Accounts
  17. ▲ 2
    Mozilla's 'onepw' Protocol
    story by sturadnidge · 2014-02-08 · 0 comments
  18. …server will have to deploy this[0] one instead. This is the general idea I got reading [1]. [0]: https://github.com/mozilla/fxa-auth-server [1]: https://blog.mozilla.org/services/2014/02/07/a-better-firefo...
    comment by mziulu · 2014-02-08 · in Introducing Mozilla Firefox Accounts
  19. …that can be used to generate) the key used to encrypt their data. See here for more details: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... I do think Mozilla would have promoted Sync more if it didn't have the recovery/UX…
    comment by dochtman · 2014-02-03 · in Mozilla adopts plain-vanilla password sign-in for Firefox sync