Opened 7 years ago

Last modified 10 months ago

#10368 new task

Review and audit Mozilla Sync

Reported by: mikeperry Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability
Cc: gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


How safe is Mozilla Sync for Tor Browser users? The actual sync data is end-to-end encrypted, but is the metadata significant? Is it OK to use the official Mozilla Sync servers, or can they become a vector for targeted exploitation?

Also, how about safety? Can it damage your TBB profile in ways that reduce your anonymity? Do we need to/can we hack sync in TBB so that it only will sync items with other Tor Browsers and not the official Firefox?

Child Tickets

Change History (7)

comment:1 Changed 7 years ago by mikeperry

See also #7188.

comment:2 Changed 7 years ago by gk

Cc: gk added

comment:3 Changed 6 years ago by erinn

Component: Firefox Patch IssuesTor Browser
Keywords: tbb-firefox-patch added

comment:5 Changed 3 years ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

comment:6 Changed 10 months ago by gk

Keywords: tbb-firefox-patch removed
Owner: set to tbb-team
Status: newassigned

comment:7 Changed 10 months ago by gk

Status: assignednew
Note: See TracTickets for help on using tickets.