On 15/08/2013 4:44 AM, Richard Newman wrote: >> 3. invisibly creates a Sync account to do the actual Syncing (so no major >> desktop code changes needed) (this might require using a stage Sync server >> to avoid captchas) > > Another option here is auth changeover (the Sync clients have pluggable > auth); that's more of a server cost than a client cost.
The Sync servers have pluggable auth too. We should talk through some of the options here, in parallel to the client work. For example, we may be able to stand up a separate Sync1.1 cluster that auths with a BrowserID assertion, or auths directly against (something derived from) the FxAccount credentials. Or at least one that doesn't require a captcha for accounts already known to exist in the FxAccounts DB. It's not clear whether we actually intend to ship this thing, but supposing we do: rough timeline? Ryan _______________________________________________ Sync-dev mailing list [email protected] https://mail.mozilla.org/listinfo/sync-dev
