Firefox Lockbox

Re:Firefox Lockbox by hartator on Tuesday July 10, 2018 @12:59PM (#17499949)

I wonder if the passwords are encrypted from end-to-end.

I am not very confortable having my passwords in plaintext, even on Mozilla servers.

[ Parent | on HN ]

Re:Firefox Lockbox by firefox-lockbox on Wednesday July 11, 2018 @05:38PM (#17510489)

Your logins are encrypted end-to-end, with a key that Mozilla's server don't have.

You can find more about how sign-in and key management works in https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...

[ Parent | on HN ]

Re:Firefox Lockbox by driminicus on Tuesday July 10, 2018 @01:06PM (#17500037)

I haven't looked in to it, as I'm not an ios user, but Mozilla would be very stupid if this isn't end to end encrypted. And as far as I know Mozilla typically isn't stupid.

[ Parent | on HN ]

Re:Firefox Lockbox by hartator on Tuesday July 10, 2018 @01:15PM (#17500134)

`will sync to the app using 256-bit encryption` is not very reassuring. It seems to be regular SSL without a master key.

[ Parent | on HN ]