Live data from Hacker News

Introducing Mozilla Firefox Accounts

blog.mozilla.org

41–50 of 63 posts

Re: Introducing Mozilla Firefox Accounts

#41
Mozilla is a trusted organization

Trust is such a poor and overloaded word. What is Mozilla "trusted" to do? That's a very difficult question to answer.

Perhaps thinking in terms of expectations would be better: My expectation is that Mozilla will produce a decent browser, with occasional bumps and steps backwards in response to some flavour du jour, most notably in the area of wouldn't it be cools that break usability. Not to mention the mobile browser considering my tablet and phone to be the "same type of device", when my tablet is much closer to my computer - and it's the computer's UX I want everywhere, not the phone's.

My expectation is that Mozilla will produce a half-decent email client that I have no real reason to use.

My expectation is that in doing these things Mozilla software will mostly stay out of my way, mostly work as I expect (sync the function works pretty much as expected, sync the UX is awful - I still need all manner of extension and app to get the "move easily from one device to another" experience I really want).

My expectation is that Mozilla will occasionally cook up something new, e.g., Persona, that I really don't see a need for, and that Mozilla will be unable to articulate why that new thing is needed, cool, or anything else.

If Mozilla disappeared tomorrow, I would be quite upset, because FF sucks far less than every other browser - maybe that's because I am so used to it, that I've made it work for me, but moving to anything else would be painful. My expectation is that they will continue to deliver excellent B+ software that is adequate to my needs and wants.

But why on earth would I expect that I could trust Mozilla with anything more than my sync information?

I trust Mozilla about as much as I trust my bank, as much as I trust Google, and, to be fair, more than I trust facebook. But again, trust is the wrong word: I expect Google to mine my information, make the occasional misstep, but to by and large attempt to keep my information safe and secure, because if they don't, it ain't just mine they release, it's millions of ours, and they cannot afford that.

I expect my bank to mess up UX occasionally, but to do security reasonably well, and to not share my personal overmuch, because of the regulatory framework in Canada: They just cannot mess this up without serious consequence.

I expect facebook to mine, share, intrude, mess around, and generally do stupid things. I am never disappointed.

What should I expect of Mozilla Accounts?

Nothing. Nothing at all, because "Accounts" is so not what I think of when I think "Mozilla". I hear "Mozilla" I think "FireFox", I think half-decent browser, better than others, adequate email client, neither better nor worse, I think confusing cross-device UX...

...but do I think trust?

Nope.

And the "occasional bump in response to something shiny" mentioned above means I never will - at least not without major public rebranding.

If I am going to trust you, you need to convince me you are rock-steady reliable, and never prone to blowing with the wind.

Re: Introducing Mozilla Firefox Accounts

#42

I'm really disappointed this doesn't authenticate against Persona. Supporting Persona in Firefox seems to be pretty slow coming, and this seems like a big blow against having that smoothly integrating it.

Persona is an awesome way to verify email address ownership, but that's only part of what Sync and the Firefox Marketplace need. For instance, Sync needs a user-memorable password for client-side encryption, and Marketplace needs the ability to force users to re-authenticate before a purchase, which is only feasible in a centralized system. Then there are COPPA concerns: We don't want to build an age gate into Persona, but we need one on Sync and Marketplace. Firefox Accounts lets us do that once, up front, and be on our merry way.

Nevertheless, I'm hopeful that we'll integrate Persona into the Firefox Accounts workflow, but that's still only part of the problem that Firefox Accounts is trying to solve. :)

(Why wasn't it there at first? We were still working out protocol / data format details, and sticking with a known username/password system reduced the number of variables while reinventing Sync.)

Re: Introducing Mozilla Firefox Accounts

#43
> Does Firefox Accounts provide email? No.

Bummer. I've been waiting for more than ten years to get a firefox email account.

What's the easiest way to have hundreds of millions of loyal followers that use your web services on a daily basis?

Email.

That's the starting point, besides the browser.

Re: Introducing Mozilla Firefox Accounts

#45

Mozilla is a trusted organization Trust is such a poor and overloaded word. What is Mozilla "trusted" to do? That's a very difficult question to answer. Perhaps thinking in terms of expectations would be better: My expectation is that Mozilla will produce a decent browser, with occasional bumps and steps backwards in response to some flavour du jour , most notably in the area of wouldn't it be cools that break usabil…

Mozilla is the most trusted Internet company, and you can see the methodology here http://www.ponemon.org/local/upload/file/2012%20MTC%20Report... I trust Mozilla to keep my data safe, not mine it or sell it for profit. I trust Mozilla to give me control over my data. I trust Mozilla to publish an open API to access my data from other programs. Those are important things when I'm considering a cloud storage provider.

Re: Introducing Mozilla Firefox Accounts

#46
post #39

I have no problem with Mozilla doing this so long as its not pushed down my throat. I have no desire to use a cloud service.

While they can, of course, do whatever they want, I am disappointed by the development of unnecessary peripheral functionality such as this. I think that the resources put toward this endeavor could have been better spent on improving the performance of Firefox, or perhaps reducing its memory usage, or even fixing the numerous bugs that affect it. Firefox isn't as bad as it once was with respect to those things, but…

Of course those are priorities. That's why it says right at the top that one team has been working on this. It's not like all developers need to be doing the same thing all the time.

Re: Introducing Mozilla Firefox Accounts

#47
post #44

I wouldn't mind the server side component to this. I'd like to run my own server so that my devices can use. You'd imagine it would be available with it being Mozilla, right? Edits: YES! https://github.com/mozilla/fxa-auth-server

Both the auth server and the Sync server are available.

Re: Introducing Mozilla Firefox Accounts

#49

How long till this is integrated with the main sponsor's unloved child, G+? I've got more pressing matters than yet another account with personal information and data kept in the US ...

Mozilla Corporation gets paid by Google to offer Google as a search engine to Firefox users. There's no sponsorship relationship — it's a mutual exchange of value.

See the corporation's audited financial statements:

https://static.mozilla.com/moco/en-US/pdf/Mozilla_Audited_Fi...

Re: Introducing Mozilla Firefox Accounts

#50

Does anyone know if there will be a standalone client library for this API? I build an iOS browser that works with the old sync api and building a client on my own is probably a bad idea

The storage API is very similar -- a few record extensions, a few headers changed. The auth layer is completely new, and there's no iOS client library for it, nor any plans for one that I know of.
Post reply on HN