News for hackers. Stuff that matters.
Re:Firefox Can Now Get Push Notifications from Your Favorite... by callahad on Wednesday January 27, 2016 @03:47PM (#10983173)
All data brokered by the service must be encrypted to a keypair whose private key is held only by the end user's browser, using the scheme described in the webpush-encryption IETF draft spec at https://tools.ietf.org/html/draft-ietf-webpush-encryption-01
Re:Firefox Can Now Get Push Notifications from Your Favorite... by drdaeman on Wednesday January 27, 2016 @05:50PM (#10984209)
Thanks for all your comments!

I wonder about metadata, though. While Mozilla doesn't know the contents of messages, it's still generally well aware of who (sender IP) is sending messages to whom (receiver IP) - is that correct?

(I suppose this can be somewhat mitigated by running private self-hosted autopush instance and replacing dom.push.serverURL)