As a privacy concerned user, I want Persona to stop pinging Mozilla every time I use Persona so that I can be reasonably sure Mozilla is not tracking my sign ins.

mozilla / persona-roadmap

A repository for user stories related to Mozilla's Identity efforts.

3 stars 1 forks source link

As a privacy concerned user, I want Persona to stop pinging Mozilla every time I use Persona so that I can be reasonably sure Mozilla is not tracking my sign ins. #17

Open shane-tomlinson opened 11 years ago

r0bl0rd commented 11 years ago

Benefit? Priority?

callahad commented 11 years ago

FWIW, delivering on our privacy promise is a huge sell, especially outside of North America. An LDAP service that's integrating Persona just today raised that on our mailing list:

Privacy as a main difference with OpenID: I see that the privacy point is an important argument for BrowserID. After implementing the RP side, it's not so clear for me. [... centralized verifier ...] Seems no so different from OpenID, no?

As soon as we stabilize our data formats, we can kick the centralized verifier to the curb. :)

fmarier commented 11 years ago

What @callahad said is also my experience talking to people outside of the US (especially in Europe).

Many are looking for a solution that can be hosted entirely outside of the US. And that was true even before the NSA started its privacy campaign in the media.

fmarier commented 11 years ago

Three things need to happen to achieve this:

Allowing self-hosting of include.js (see issue #47).
Native support in the browser so that the shim isn't used anymore.
Local verification through a library instead of verifier.login.persona.org.