<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Hi deep Syncers,</div><div class=""><br class=""></div><div class="">Users forget passwords. We can’t stop this; but perhaps we can eliminate the instances of single-device users resetting their passwords and destroying potentially the only back-up they have of their bookmarks, passwords, etc.</div><div class=""><br class=""></div><div class="">Some questions I’m aiming to get answered:</div><div class=""><ul class=""><li class="">How many of our users have lost data due to a password reset?</li><li class="">How many more are at risk of doing so?</li><li class="">How many have stopped short of a reset and abandoned Sync and/or Firefox?</li><li class="">After registering, are users aware that their data will be erased during a reset?</li><li class="">Can Sync encryption be re-engineered so that data survives a reset?</li><li class="">If yes, what UX changes would be required besides copy changes?</li><li class="">If it can’t be, is their consensus among users about which datatypes should be by default encrypted (e.g. passwords) and unencypted (e.g. bookmarks)?</li><li class="">If there’s not consensus, would users prefer to choose what’s encrypted?</li><li class="">Would Mozilla ever be okay with letting users leave their history or passwords unencrypted on our servers?</li></ul><div class="">I’m creating a Shield survey, but the 5th question above can only be answered by engineering (and the last question by security).</div></div><div class=""><br class=""></div><div class="">Any other questions come to mind?</div><div class=""><br class=""></div><div class="">
<div class=""><div style="orphans: 2; widows: 2;" class="">Ryan Feeley</div><div style="orphans: 2; widows: 2;" class="">UX, Cloud Services</div><div style="orphans: 2; widows: 2;" class="">Mozilla UX</div><div style="orphans: 2; widows: 2;" class="">IRC: rfeeley</div></div>
</div>
<br class=""></body></html>