<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>We need to a debrief from Zach:</div><div><br></div><div><a href="https://github.com/mozilla/picl-idp/issues/249#issuecomment-27045984">https://github.com/mozilla/picl-idp/issues/249#issuecomment-27045984</a></div><div><br></div><div>-chris</div><div><br></div><div><br></div><br><div><div>On Oct 24, 2013, at 5:30 PM, Chris Karlof <<a href="mailto:ckarlof@mozilla.com">ckarlof@mozilla.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">That's the intention, but it all depends on what we need to do to get FXOS 1.3 shipped with FxA on time. If it's "no FxA" vs. "/raw_password", I think we'll go with "/raw_password". We've had our head in the sand a bit about this, but we need to evaluate the key stretching costs and the network costs. We're at 4 RTs right now. The very best we could get it down to with SRP (I think) is 2 RTs.<br><br>-chris<br><br><br>On Oct 24, 2013, at 5:22 PM, Ryan Kelly <<a href="mailto:rfkelly@mozilla.com">rfkelly@mozilla.com</a>> wrote:<br><br><blockquote type="cite">On 25/10/2013 11:03 AM, Zachary Carter wrote:<br><blockquote type="cite">I'll write a patch. With the new raw_password endpoints on the FxA<br>server, a HAWK client with a key derivation helper is sufficient to get<br>the FTU flow working on FxOS for 1.3.<br></blockquote><br>Wait, do we plan to keep these raw_password endpoints and ship something<br>on top of them? I thought they were squarely in "temporary hack" territory.<br><br><br> Ryan<br><br>_______________________________________________<br>Dev-fxacct mailing list<br><a href="mailto:Dev-fxacct@mozilla.org">Dev-fxacct@mozilla.org</a><br>https://mail.mozilla.org/listinfo/dev-fxacct<br></blockquote><br>_______________________________________________<br>Dev-fxacct mailing list<br><a href="mailto:Dev-fxacct@mozilla.org">Dev-fxacct@mozilla.org</a><br>https://mail.mozilla.org/listinfo/dev-fxacct<br></blockquote></div><br></body></html>