Firefox Sync is end-to-end encrypted? My understanding is that Mozilla cannot actually read user sync data.
Ah, looks like they still do. My mistake. I was harkening back to the old Sync protocol which just gave you a decryption key, rather than any account system. From this post it seems they've just integrated it with your password, if your link is describing the present method.
What I had in mind was this: https://blog.mozilla.org/services/2014/05/08/firefox-account.... i.e., back in the day you could self-host Firefox Sync, like a Nextcloud. It seems this is still possible, though not straightforwardly: https://discourse.mozilla.org/t/how-to-self-host-fxa-and-syn...
Yep -- and this is why I personally think there's something rotten in Mozilla.
At the beginning there were 3rd party extensions to sync bookmarks that just allowed you to point to any webdav server (which is trivial to self-host). At some point Mozilla decided to implement this functionality as a 1st party extension, thereby displacing all the other 3rd party extensions that were doing the same (and later on outright killing these extensions, by changing the APIs and making the new ones buggy).
And once the other extensions were killed, they started to make it harder and harder to self-host. Up to the point I gave up self-hosting Firefox Sync; it's just not worth the effort, and I really see absolutely no need for such a huge infrastructure for what could be done with plain clothes WebDAV.
That is the day Mozilla earned my distrust. I basically use Firefox (or its forks) just because there is no other choice.
It seems impossible, but I wonder if Mozilla could be salvaged?
I want a browser styled like the rugged and customisable UI of Firefox 4.x with the Gecko improvements of the Quantum releases. With desktop-to-mobile sync with real cryptography, before this nonsense of a 'Firefox account'. A browser that preserved features pleasing to techies and power users, while omitting features abhorrent to them, would be the ideal.
How could such a thing be funded, and how could we get the old hacker collective style of Mozilla back? Or how would we start something new and get the full time labour necessary to develop such a browser, with an independent rendering engine and JS VM? While keeping unethical incentives as far from sight as possible.
I don't pretend it is an easy question, but framing the right question is a start.