AFAIK Google can't decrypt your Chrome data either (if you've set an optional passphrase).
Re:Why I use Firefox
by SushiHippie on Wednesday February 28, 2024 @09:08AM
(#39538103)
Though even the librewolf maintainers trust mozilla with the encryption
https://librewolf.net/docs/faq/#can-i-use-firefox-sync-with-...
One can self-host the sync server. I do this and it works great across Android and a Linux desktop, including live showing which tabs are open.
What does the storage layer (database) contain? Clear-text, usable data, or encrypted randomness?
Great question! I'd never actually checked, but opening up the SQLite database, it looks encrypted. I see a table `batch_upload_items` full of ciphertexts.
I'm running the old Python sync server for the time being.
It is indeed using end-to-end encryption: https://hacks.mozilla.org/2018/11/firefox-sync-privacy/
Re:Why I use Firefox
by the_third_wave on Wednesday February 28, 2024 @09:10AM
(#39538141)
Sync can be self-hosted but the equally necessary auth-service is centralised at Mozilla. This does not make sense from a technical perspective and is reason for me to not use Firefox sync. I used to run is predecessor and liked the services it provided so I'd like to run the whole current stack as well but alas.
My understanding is that can be self-hosted as well, it's just slightly more annoying.
So, you trust some other random people with your privacy instead then?
I don't. I still neuter Firefox (LibreWolf, mostly.) and disable all the sync nonsense.