Hacker News Reader

I wonder if the passwords are encrypted from end-to-end.

I am not very confortable having my passwords in plaintext, even on Mozilla servers.

Your logins are encrypted end-to-end, with a key that Mozilla's server don't have.

You can find more about how sign-in and key management works in https://github.com/mozilla/fxa-auth-server/wiki/onepw-protoc...

I haven't looked in to it, as I'm not an ios user, but Mozilla would be very stupid if this isn't end to end encrypted. And as far as I know Mozilla typically isn't stupid.

`will sync to the app using 256-bit encryption` is not very reassuring. It seems to be regular SSL without a master key.

Reply on news.ycombinator.com