[Owncloud] Mozilla sync integration project

[Stephan Schulz]

Great to have that discussion over here. I partly disagree with Michiel. If a user decides to trust his own cloud on his own server by storing the private key on it, it is very similar to trusting another instance of Firefox on a different computer by providing the key there. That of course does only apply if the user is also the owner of the own cloud, but that might often be the case here.
What would be great if the user can decide to trust the ownCloud instance or not, by providing the user the option of both possibilities.

Stephan


----- Original Message -----
> On Tue, May 8, 2012 at 7:45 AM, Timmeey <timmeey at timmeey.de> wrote:
> > I don't think that it is possible to access these firefox sync data
> > if we use the Firefox sync API. Coz by design everything gets
> > encrypted by firefox it Self.
> 
> exactly. it's host-proof hosting. ownCloud does not get to see the
> data. the advantage is that if your ownCloud server gets hacked, your
> bookmarks and potential other things you may have in there are still
> safe.
> 
> >
> > Maybe there is a Way. If we find a way for the users to get the
> > encryption key Out of firefox, Then they could give it to owncloud
> > for "on the fly decryption" of the Data.
> >
> 
> no, that would totally break the design. the idea of Mozilla Sync is
> that you store your private stuff on an untrusted server, using
> host-proof hosting. if you start giving the private key to the data
> server, then you end up with something that's broken.
> 
> it is definitely an interesting goal to have your bookmarks and
> browser settings on your ownCloud, but the way to achieve that would
> be to allow a "don't encrypt" option in Mozilla Sync. It would also
> be
> very interesting to tie that in with the webfinger app and Mozilla
> Persona.
> 
> but if you're purely looking at using ownCloud for Mozilla Sync, then
> IMO you need to respect its end-to-end encryption design.
> _______________________________________________
> Owncloud mailing list
> Owncloud at kde.org
> https://mail.kde.org/mailman/listinfo/owncloud
>