Earlier quoted context omitted.
Brave, for now.
So the alternative to Firefox is some cryptocurrency software?
[dead]
Self-Hosting a Firefox Sync Server
81–90 of 91 posts
Re: Self-Hosting a Firefox Sync Server
#82Earlier quoted context omitted.
To best of my awareness, the login page (including JS code) is still served over the Internet, and encryption keys are derived solely from the password. That’s not a good design for something as sensitive as one’s full browser data.
send a pr. but don't know how adding a key owned by moz would make this more trustworthy
As AshamedCaptain notes, Mozilla actively don’t want an actually-secure password storage protocol. They chose to weaken their security.
Re: Self-Hosting a Firefox Sync Server
#83I'll jump to the wolfside but I'm going to absolutely miss "send tab to device", where I'm often driving this from mobile firefox, sending to one of a few other devices for Next time I'm sitting at a desk There are alternative techniques but maybe none with so few clicks, where the outcome is something literally in your face. A new tab opening on a computer elsewhere. It's that "I'm almost forced to see this" that I…
I'll miss this, too. But it's an acceptable loss.
Quick thoughts on how to get it back: Orion Browser by Kagi has an iOS app, and they support Firefox plugins. So in spite of how much effort it takes to get a mobile app to do what you want, it might be possible for LibreWolf and Orion for iOS to sync.
Re: Self-Hosting a Firefox Sync Server
#84Earlier quoted context omitted.
Why have your data sitting on a timebomb when quantum risks are just around the corner. Self host if you care about your data!
How do you protect your self host against quantum risks?
Self host one have control over the post quantum custom encryption you want to use, not at wimp of some corporate over Lord who know they are really doing it for user benefit or just a user acquisition trick.
Re: Self-Hosting a Firefox Sync Server
#85Note that this setup still relies on Mozilla infrastructure for several surrounding services for auth, email, account metadata, etc. https://github.com/dan-r/syncstorage-rs-docker/blob/main/app... It's a good start though and as long as you're OK migrating your account you can plug those in later. Fully self-hosting all the components is just as doable but a little bit more involved. Compared to when I last set it up…
> this setup still relies on Mozilla infrastructure for several surrounding services for auth, email, Why does email rely on mozilla infra?
The other way around. Server-side email verification for accounts and password-reset is an integrated part of the flow and also needs to be hosted and wired up, unless you want to dig into the code and patch those parts out.
Re: Self-Hosting a Firefox Sync Server
#86Asking a related question: is there anyway to sync history between browsers, fully self-hosted?
Re: Self-Hosting a Firefox Sync Server
#87Earlier quoted context omitted.
> this setup still relies on Mozilla infrastructure for several surrounding services for auth, email, Why does email rely on mozilla infra?
Mozilla's email-related service is https://relay.firefox.com/ which obviously needs to rely on quite a bit of Mozilla infrastructure in its default incarnation, and is probably a fair bit harder to self-host than Firefox Sync.
That is also unrelated. Firefox Sync itself requires Mozilla Accounts to function at all, which requires email for verification and password reset. To properly self-host Firefox Sync you need those parts too, which includes an SMTP server (or substitute).
Re: Self-Hosting a Firefox Sync Server
#88Earlier quoted context omitted.
Mozilla's email-related service is https://relay.firefox.com/ which obviously needs to rely on quite a bit of Mozilla infrastructure in its default incarnation, and is probably a fair bit harder to self-host than Firefox Sync.
Is Mozilla Relay (email) really needed for Sync? Never used Sync, so maybe I don't understand something. But does not sound safe to put all eggs into this busket at once.
Relay is unrelated to that conversation.
Re: Self-Hosting a Firefox Sync Server
#89Note that this setup still relies on Mozilla infrastructure for several surrounding services for auth, email, account metadata, etc. https://github.com/dan-r/syncstorage-rs-docker/blob/main/app... It's a good start though and as long as you're OK migrating your account you can plug those in later. Fully self-hosting all the components is just as doable but a little bit more involved. Compared to when I last set it up…
Maybe eventually the whole stack can make its way into a docker container with a shell script for config.
It's enough different components to not be a good fit for an all-in-one image at all. That road lies madness.
docker-compose is a much better fit. That already exists. What we need is more people actually deploying and engaging (;
Re: Self-Hosting a Firefox Sync Server
#90Earlier quoted context omitted.
How do you protect your self host against quantum risks?
Self host one have control over the post quantum custom encryption you want to use, not at wimp of some corporate over Lord who know they are really doing it for user benefit or just a user acquisition trick.
> the post quantum custom encryption
Do you have a custom encryption that is post quantum?