Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The key difference being that Firefox's implementation gives you all this without having to let Google rifle through the data you want to sync.


Not anymore: as I posted last night[1], Mozilla could choose to give themselves access to your password, when you create your account or when you change its password. Anyone who is able to successfully MITM you & Mozilla (say, someone with a Komodia cert if you're infested with Superfish, or any of the CAs in the world, or anyone who can compel them to certify a MITM cert) can do the same.

Google do allow you to use your own passphrase, so conceivably at this point Chrome is at least somewhat more secure than Mozilla.

It's a crying shame.

[1] https://news.ycombinator.com/item?id=9098459


A crying shame indeed. Thanks for the update.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: