mozilla/fxa-auth-server
View on GitHub ↗ ★ 397 JavaScript archived
DEPRECATED - Migrated to https://github.com/mozilla/fxa
19 mentions on Hacker News by 19 people: 3 stories, 16 comments · first 2014-02-03 · latest 2023-11-24
20082026
-
…sync uses end-to-end encryption: https://support.mozilla.org/en-US/kb/how-firefox-sync-keeps-... , https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... . There's nothing mandatory about the initial shortcuts - just remove them.…
comment by mkl · 2023-11-24 · in Chrome pushes forward with plans to limit ad blockers in the future -
…difficult. This is effectively the scheme we used on Firefox Accounts to protect the Sync password: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... . Also note: don't use different PBKDF round counts as a distinguisher,…
comment by lotharrr · 2021-02-26 · in Show HN: Doppler Share – Share one-off secrets with end-to-end encryption -
…it is possible to use Mozillas account server. Also, from the description of the protocol ( https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... ) it was not clear to me, what exactly is encrypted? Only the passwords? I had the…
comment by beatle_sauce · 2018-11-14 · in Private by Design: How We Built Firefox Sync -
Yes, sort of (more about the process: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... ). Key difference: you don't need to sync all the data up again, since there's a separate key for that, which doesn't change. That said,…
comment by yoklov · 2018-11-14 · in Private by Design: How We Built Firefox Sync -
…that Mozilla's server don't have. You can find more about how sign-in and key management works in https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
comment by firefox-lockbox · 2018-07-11 · in Firefox Lockbox -
…they are encrypted on the client. https://blog.mozilla.org/services/2014/04/30/firefox-syncs-n... https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
comment by sciurus · 2018-07-10 · in Firefox Lockbox -
We do :) The full details are at https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... , but basically we derive two separate keys: one for authentication, that gets sent over the wire, and a completely different one for…
comment by callahad · 2017-11-14 · in Firefox 57.0 Released -
…your objection isn't about the protocol, but its implementation (e.g. usage of HTML/Javascript): https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... > you download the browser once That's not true. Modern browsers are set to…
comment by bad_user · 2016-07-18 · in Google will use Chrome browsing data for ad tailoring -
…https://blog.mozilla.org/services/2014/02/07/a-better-firefo... https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... Edit: From what I can see, client side encryption in Google Chrome appears to be opt-in?
comment by Excavator · 2015-11-26 · in Firefox: We Don't Need Google's Money Any More -
…But yes, it is more dependent on the strength of your password than the previous sync system. [1] https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
comment by rfk · 2014-04-29 · in Firefox and Flux: A New, Beautiful Browser is Coming -
…thanks. Here's a code-dump of the new Firefox Account server. Not sure yet if I can implement this: https://github.com/mozilla/fxa-auth-server
comment by dingaling · 2014-03-21 · in Firefox 29 beta arrives with easy Sync tool.... -
…cannot read this data, but can attempt a brute-force dictionary attack against the password. - https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... We do not yet know which data will be assigned to which category by default, but…
comment by comex · 2014-02-09 · in A Better Firefox Sync -
…protocol document is (linked in the article) has a lot of interesting details about the new system: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...
comment by magicalist · 2014-02-08 · in A Better Firefox Sync -
…my devices can use. You'd imagine it would be available with it being Mozilla, right? Edits: YES! https://github.com/mozilla/fxa-auth-server
comment by chippy · 2014-02-08 · in Introducing Mozilla Firefox Accounts -
…server will have to deploy this[0] one instead. This is the general idea I got reading [1]. [0]: https://github.com/mozilla/fxa-auth-server [1]: https://blog.mozilla.org/services/2014/02/07/a-better-firefo...
comment by mziulu · 2014-02-08 · in Introducing Mozilla Firefox Accounts -
…that can be used to generate) the key used to encrypt their data. See here for more details: https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc... I do think Mozilla would have promoted Sync more if it didn't have the recovery/UX…
comment by dochtman · 2014-02-03 · in Mozilla adopts plain-vanilla password sign-in for Firefox sync