On Mon, Jun 10, 2013 at 6:28 PM, Henri Sivonen <[email protected]> wrote:
> On Mon, Jun 10, 2013 at 5:44 AM, Gregory Maxwell <[email protected]> > wrote: > > One of the things that has disappointed me, however, is that many people > are > > not really aware of the degree that Mozilla's actions are protective: > ... > > But, in reality, what Mozilla has done is often much stronger: compared > > to the alternatives, the design of services like Firefox Sync > > Advertising the design of Firefox Sync at this point would make > Mozilla look pretty bad when PICL replaces Sync with a weaker design > (by default) in the name of usability and user expectations. > Yes, but... PICL could offer both the "Mozilla has keys" and "Mozilla doesn't have keys" options. PICL could allow users to switch between them easily. We can continuously tune how those options are presented even to the point of changing the defaults if it became advisable. We can offer users the gold standard even if it's not the default, and explain why they should choose it. Our story there still seems pretty strong to me. The tricky, but essential, part is to build services that work even when Mozilla doesn't have keys. People are worried about supporting sharing when Mozilla doesn't have keys, but I think we can go quite far. For example, since URLs contain a field that doesn't get sent to the server, you can share URLs containing the keys needed to decrypt content, e.g. http://0bin.net/paste/b3dc50ec2a278741399c6b0860beb78fc704c2e2#P8ZXJ0Kn6IhP0vXECm7G/F4qa16XMGUVeZ9lpvNowjc= We have really great client technology now to help us "dumb down the cloud" --- WebRTC, IndexedDB, fast JS. We can add whatever else is helpful --- some kind of Web Crypto, and http+aes with the bugs fixed. We have Persona. We have PICL. We have transparency and a trusted brand. We are geographically diverse. Greg's right, there's a big opportunity for us here. Rob -- q“qIqfq qyqoquq qlqoqvqeq qtqhqoqsqeq qwqhqoq qlqoqvqeq qyqoquq,q qwqhqaqtq qcqrqeqdqiqtq qiqsq qtqhqaqtq qtqoq qyqoquq?q qEqvqeqnq qsqiqnqnqeqrqsq qlqoqvqeq qtqhqoqsqeq qwqhqoq qlqoqvqeq qtqhqeqmq.q qAqnqdq qiqfq qyqoquq qdqoq qgqoqoqdq qtqoq qtqhqoqsqeq qwqhqoq qaqrqeq qgqoqoqdq qtqoq qyqoquq,q qwqhqaqtq qcqrqeqdqiqtq qiqsq qtqhqaqtq qtqoq qyqoquq?q qEqvqeqnq qsqiqnqnqeqrqsq qdqoq qtqhqaqtq.q" _______________________________________________ governance mailing list [email protected] https://lists.mozilla.org/listinfo/governance
