On 13-08-14 4:23 PM, Ryan Kelly wrote:
On 15/08/2013 4:44 AM, Richard Newman wrote:
3. invisibly creates a Sync account to do the actual Syncing (so no major
desktop code changes needed) (this might require using a stage Sync server to
avoid captchas)
Another option here is auth changeover (the Sync clients have pluggable auth);
that's more of a server cost than a client cost.
The Sync servers have pluggable auth too. We should talk through some
of the options here, in parallel to the client work.
For example, we may be able to stand up a separate Sync1.1 cluster that
auths with a BrowserID assertion, or auths directly against (something
derived from) the FxAccount credentials. Or at least one that doesn't
require a captcha for accounts already known to exist in the FxAccounts DB.
I discuss this fork in
https://bugzilla.mozilla.org/show_bug.cgi?id=905438#c0 -- would be happy
to have you weigh in on the "back-end changes" branch.
Nick
_______________________________________________
Sync-dev mailing list
[email protected]
https://mail.mozilla.org/listinfo/sync-dev
