Re: Does Trisquel run a libre version of the Firefox Sync server?

Sin respostas
Ignacio Agulló
Desconectado
Joined: 07/30/2019

O 2023-10-05 05:48, escribiu:
> According to the LibreWolf FAQ:
>
> "Firefox Sync encrypts your data locally before transmitting it to the
> server. Additionally, you can self-host the old version of the server
> if you really don't want to use Mozilla's, and there's work being done
> to have the new version equally easy to self-host. Find out more about
> the technical details of Sync's implementation here and here."
>
> https://librewolf.net/docs/faq/#can-i-use-firefox-sync-with-librewolf-is-it-safe-to-do-so
>
> Does Trisquel run a libre version of the Firefox Sync server for use
> with Trisquel and ABrowser? If not, would this be possible? Even a
> version that stored no data locally, but just facilitated sync between
> 2 browsers online at the same time would be handy.

I'll tell you what I recall about it, even though it may be
inaccurate or obsolete:

1. Firefox Sync started as an add-on for Firefox that allowed to use a
free, end-to-end-encrypted service of synchronization between multiple
Firefox installations.

2. At some early Firefox version (version 4, I think, maybe around
2009), the service was included in Firefox and was no longer an add-on.
It was at that moment that I decided to try it out, and I found the
service very useful to keep my bookmarks between the Firefox browsers at
my desktop and laptop computers. Later on, Firefox for Android would
come up too.

3. Some years later (maybe around 2014) it was reported that Firefox
modified its source so the password for Firefox Sync would be
transmitted to, and stored by, Mozilla. Therefore, the service can no
longer be considered to be end-to-end-encrypted. This has the likes of
the usual forced change imposed by the U.S. goverment so their spying
agencies (NSA, CIA) could spy on everyone. We, the users of the
service, were given a choice: stay using the old service that would be
phased out at an undefined date in the future, or switch to the new
service. I chose to switch. Ever since I have been very curious about
what would happen if I didn't, and curiosity alone is enough to make me
regret my choice, not to mention the possibility of the service still
working for a few guys that chose to stick to their choices.

4. Some years later, I found this document explaining how to set your
own Firefox Sync server and bookmarked it, with the idea of using it on
the future. Still haven't set up my own server, but you might find it
to be useful:

Run your own Sync-1.5 Server — Mozilla Services
https://mozilla-services.readthedocs.io/en/latest/howtos/run-sync-1.5.html

I don't know if the sources for this installation still work, or if this
1.5 server would still work with the current version of Firefox.
Anyway, that's all I know of the matter.

Kind regards,
Ignacio Agulló.