Closed Bug 1333818 Opened 8 years ago Closed 8 years ago

Redo hashing of collection ID

Categories

(WebExtensions :: Untriaged, defect, P2)

Product:
WebExtensions
Component:
Untriaged
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 1333810

People

(Reporter: glasserc, Assigned: glasserc)

References

Details

(Whiteboard: triaged)

The way we currently map extension IDs to collection IDs through hashing based on the user ID. That means that knowing the user ID is enough to break the hashing. The user ID doesn't seem like it should be that secret. Better would be to hash it with a random salt that is generated at sync time, the same way we do with keys for encrypting records.
Assignee: nobody → eglassercamp
Depends on: 1333814
Priority: -- → P2
Whiteboard: triaged
This is getting fixed in 1333810.
Status: NEW → RESOLVED
Closed: 8 years ago
Resolution: --- → DUPLICATE
Product: Toolkit → WebExtensions
You need to log in before you can comment on or make changes to this bug.