search

etesync / etesync-web

An EteSync web client
https://www.etesync.com
GNU Affero General Public License v3.0
243 stars 30 forks source link

Firefox incompatibility with Fingerprinting protection #237

Open kaeedo opened 2 years ago

kaeedo commented 2 years ago

Hello. I'm using Firefox 95 on Windows 10, and it seems that when Fingerprint protection is enabled in the FF settings under "Privacy and Security", it seems to break functionality of the site.

Additionally, I have found that uBlock Origin also prevents functionality of eteSync. I'm not sure if you're able to get around either of these issues, but I wanted to mention them anyway, as I'm trying to build something using etebase myself

Thanks

tasn commented 2 years ago

Thanks for the feedback! I suspect it may be because of the use of WASM. What breakage are you seeing exactly?

kaeedo commented 2 years ago

The signup process. It spins indefinitely when trying to Deriving encryption data...

tasn commented 2 years ago

Yup, that's the wasm being blocked then. :|

It's actually not terribly hard to change etebase to fix this issue completely. The way to do it is to change from argo2id to scrypt. The only problem is backwards compatibility for EteSync users.

kaeedo commented 2 years ago

This is where I showcase my lack of knowledge in cryptography, but would it be feasible to fallback to a JS implementation of argo2id?

tasn commented 2 years ago

We do fallback to a JS implementation, and that's the problem. Argon2ID is very fast everywhere, but VERY slow on JS because of the lack of 64bit arithmetic. Scrypt doesn't suffer from the same issue.

evelineraine commented 2 years ago

Just a note: login works for me if I add pim.etesync.com as an exception to Firefox's Enhanced Tracking Protection. Even when Fingerprinting protection is otherwise enabled browser-wide. (Also have to disable uBlock Origin for the page)

Using Firefox 99.0.1.