dcoeurjo
Member
First, the brand new FFSync package in LD is terrific and I'd like to thank again the dev team.
But I may have quite naive questions related both to FFSync Server and its packaging in LD:
- it seems that the secret passphrase option in FFSync is not compatible with FFSync-LD, am I right ?
- I don't know how FFSync works but why https/SSL is not required ? is there a potential flaw since passphrases are disabled ?
regards
dav
François Hodierne
Key Master
There is nothing special in the LD package to disable the passphrase mechanism. If it's really happening, it's not expected.
If passphrase is disabled and https/SSL is not used, that's not secure, given that informations transiting in clear can be *very* important.
If your server is supporting SSL, active the SSL plugin in La Distribution plugins. The Firefox Sync application will then encourage you to use the custom server URL prefixed with https.
I will investigate the passphrase issue ... Don't hesitate if you have more infos.
François Hodierne
Key Master
Basically, there is an issue with the behavior introduced in version 1.3 of the FF Extension, which use a default passphrase. I'll see what can be done. For now, to be secure, change your passphrase in the FF extension.
François Hodierne
Key Master
Theoretically, the default passphrase issue will be fixed in version 1.4 of the Firefox Extension.
See Bug 575238 which was classified as duplicate of Bug 570180.
You must log in to post.