http://www.olafkock.de/ok/ Olaf Kock de Olaf Kock Sun, 25 Sep 2011 10:54:02 GMT Pebble (http://pebble.sourceforge.net) http://backend.userland.com/rss http://www.olafkock.de/favicon.ico http://www.olafkock.de/ok/ http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comment1316948042532 @Richard. Thanks for the clarification. As I've been travelling I've been slow with answering - will do so in the FAQ as well. After all, with this information sync not only seems like a nice feature, but also as secure as I'd like features like this to be. Olaf Kock http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comments http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comment1316948042532 Sun, 25 Sep 2011 10:54:02 GMT http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comment1316948020170 @Anonymous: I hope to have stated clearly that I didn't want to rant about the software that I didn't test. I merely wanted to react to the documentation that IMHO clearly prohibits to even try the software for the reasons given. Olaf Kock http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comments http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comment1316948020170 Sun, 25 Sep 2011 10:53:40 GMT http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comment1316766686530 "We" in this case refers to Firefox. The FAQ is written for non-technical users; some degree of imprecision is sometimes necessary for readability. The sync key is generated on the client, and is never made available to Mozilla. (It can -- in encrypted form -- momentarily transit our servers during a J-PAKE exchange, but Mozilla is unable to obtain the cleartext.) Richard Newman http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comments http://www.olafkock.de/ok/2011/09/11/tno_trust_no_one.html#comment1316766686530 Fri, 23 Sep 2011 08:31:26 GMT