mozilla-services / FindMyDevice

Find My Device - 🚨🚨This server is obsolete and unsupported.🚨🚨
Mozilla Public License 2.0
13 stars 8 forks source link

Reduce user information footprint in db. #319

Closed jrconlin closed 9 years ago

jrconlin commented 9 years ago

There are a number of legacy items we're storing. These could be used to get user information.

e.g. the device name is currently derived from the local portion of the registration email. This could be used by a malicious party to examine the db and determine the location of an individual. This info should be removed or encrypted so that it's not leaked.

jrconlin commented 9 years ago

see https://github.com/jrconlin/FindMyDevice/tree/feature/privacy