Opened 5 years ago

Last modified 8 months ago

#10368 new task

Review and audit Mozilla Sync

Reported by: mikeperry Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability, tbb-firefox-patch
Cc: gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

How safe is Mozilla Sync for Tor Browser users? The actual sync data is end-to-end encrypted, but is the metadata significant? Is it OK to use the official Mozilla Sync servers, or can they become a vector for targeted exploitation?

Also, how about safety? Can it damage your TBB profile in ways that reduce your anonymity? Do we need to/can we hack sync in TBB so that it only will sync items with other Tor Browsers and not the official Firefox?

Child Tickets

Change History (5)

comment:1 Changed 5 years ago by mikeperry

See also #7188.

comment:2 Changed 5 years ago by gk

Cc: gk added

comment:3 Changed 4 years ago by erinn

Component: Firefox Patch IssuesTor Browser
Keywords: tbb-firefox-patch added

comment:5 Changed 8 months ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

Note: See TracTickets for help on using tickets.