Crypto Proxy: Difference between revisions

Jump to navigation Jump to search
Line 20: Line 20:
==== Sharing of Credentials ====
==== Sharing of Credentials ====


Sync clients need to use Basic Auth to connect to the Sync Service. This means that a third party application needs to know the user's username and plain text password to be able to access sync data. This is obviously not the right way to do things.
Sync clients need to use Basic Auth to connect to the Sync Service. This means that Firefo Home needs to know the user's username and plain text password to be able to access sync data. This is obviously not the right way to do things.


The Crypto Proxy solves this problem by working with a username/access token pair instead of a username/password pair.
The Crypto Proxy solves this problem by working with a username/access token pair instead of a username/password pair.


The access token is a randomly generated identifier that a third party application can use to access sync data.
The access token is a randomly generated identifier that Firefox Home can use to access sync data.


These tokens are maintained by the Sync Proxy, which means that the Sync Proxy can also easily deny a specific application or user access through this method.
These tokens are maintained by the Sync Proxy, which means that the Sync Proxy can also easily deny Firefox Home or a specific user access through this method.


==== Sync Key Management ====
==== Sync Key Management ====
Confirmed users
971

edits

Navigation menu