Le Sat, 8 Feb 2014 14:34:36 -0800,
"Richard Newman - [email protected]"
<mzsync.kerik.abe7fd01a9.rnewman#[email protected]> a écrit :

> > As far as I understand, the new sync weakens users' privacy but
> > gives the convenience of recovering bookmarks, history, preferences
> > when having forgotten the password and/or lost the recovery key. Is
> > this a fair statement ?
> 
> No.
> 
> Recoverability was an early goal that was dropped from the product as
> currently released. Those needs will perhaps be met by a tailor-made
> backup solution at a later date.
> 
> Sync 1.5 encrypts all of your data with a key derived from your
> password, and doesn't send your password over the wire. Resetting
> your password will render your data unrecoverable.
> 
> As such, it's approximately as strong as Sync 1.1, so long as you use
> a good password when creating your account.

Thank you for your answer.

So https://wiki.mozilla.org/Identity/AttachedServices/Architecture#Data_Security
is outdated, then.
I understand the Mozilla teams are very busy just now, but is there
authoritative documentation ?

Is this better discussed in IRC ?
_______________________________________________
Sync-dev mailing list
[email protected]
https://mail.mozilla.org/listinfo/sync-dev

Reply via email to