Open Bug 2014232 Opened 7 months ago Updated 4 months ago

[meta] Encrypt sensitive storage

Categories

(Enterprise Products :: Firefox, enhancement, P1)

Product:
Enterprise Products
Component:
Firefox
Type:
enhancement

Tracking

(Not tracked)

People

(Reporter: gcp, Unassigned)

References

(Depends on 1 open bug, Blocks 1 open bug)

Details

(Keywords: meta)

Currently, Firefox profiles are stored plainly on disk. That means that anyone with access to the files can read information like history, cookies and other profile information. Chrome already offers encryption for this data.

There are two main problems to solve this:

  • Encrypt SQLite database
  • Encrypt everything else

The SQLite database encryption is rather straight-forward, because there already exists a ObfuscatingVFS layer for it, that does all the heavy crypto work. This "only" needs to be enabled for all database connections.

Encryption for other file types isn't completely clear yet. One potential way is to use the existing stream encryption.

Severity: -- → S1
tracking-firefox148: --- → ?
tracking-firefox148: ? → ---
tracking-firefox149: --- → ?
tracking-firefox149: ? → ---
Priority: -- → P1
Target Milestone: --- → MVP
Blocks: firefox-client-mvp
You need to log in before you can comment on or make changes to this bug.