Click on "same browser-based encryption". It's a link to an earlier blog post where they explain the encryption methods used in Firefox Sync. It mentions end-to-end encryption, too.
Re:Introducing Mozilla Firefox Accounts
by tobehonest on Saturday February 08, 2014 @07:24AM
(#7201012)
As Mozilla is a US-based organization, is anyone afraid of the NSA/USG commandeering Mozilla to setup pen-register/password-interception a la Lavabit?
Only a couple of months ago comments like mine would have been passed off as tin-foil conspiracy. Now, I think everyone's sense of normal is now tightly wrapped in tin-foil, encased in lead.
Re:Introducing Mozilla Firefox Accounts
by riquito on Saturday February 08, 2014 @09:05AM
(#7201200)
Opposite to Lavabit, Mozilla can't decrypt your data, so I can't see this happening, unless they change the open source client code without anyone noticing.
Re:Introducing Mozilla Firefox Accounts
by rhelmer on Saturday February 08, 2014 @02:51PM
(#7202342)
The "change the open source client code without anyone noticing" attack vector is important too: https://brendaneich.com/2014/01/trust-but-verify/
I understand Mozilla is in a tight place with no access to iOS, little market share in mobile in general and the new walled gardens erected by Google, Apple, FB and soon Microsoft. But simply playing copy cat and catchup does not cut it.