MozillaWiki

Mobile/Projects/Firefox Accounts with Sync 1.1 integration: Difference between revisions

Page Discussion

Mobile/Projects/Firefox Accounts with Sync 1.1 integration (view source)

Revision as of 18:57, 10 March 2014

256 bytes added ,  10 March 2014
→‎Security/Encryption
 
(11 intermediate revisions by 2 users not shown)
Line 64: Line 64:


=== Existing sync ===
=== Existing sync ===
'''what else?'''
* {{mok}} Frequency of syncing should remain the same when we transition to the new account creation model '''this has actually improved for existing sync users on android'''
* {{mok}} By setting up Firefox Account on a desktop or Android device, users expect the sync experience to propagate across all attached instances where Firefox Account signed-in and used; including bookmarks, history (awesomebar results), passwords, ability to send open tabs, add-ons [between desktop instances only]
* {{mok}} Frequency of syncing should remain the same when we transition to the new account creation model


=== Detaching Sync ===
=== Detaching Sync ===
Line 74: Line 72:
=== Security/Encryption ===
=== Security/Encryption ===
* It is expected that synced data is encrypted securely along with their Firefox Account password
* It is expected that synced data is encrypted securely along with their Firefox Account password
* Security defaults should be the same as per existing Sync 1.1 logic, with higher-level security options available '''do we have higher level security options available?'''
* Security defaults should be the same as per existing Sync 1.1 logic, with higher-level security options available '''data is as secure as your password, also could be open to phishing. Self-hosting and higher sec options are blockers for EOLing current sync. We need an optional secondary credential'''
** Expected: all user data currently irrecoverable '''irrecoverable by whom, exactly?'''
** Expected: all user data currently irrecoverable '''cannot recover password is plan of record'''


=== Performance & Stability ===
=== Performance & Stability ===
* In the event of service interruption to Sync, this must have no impact with current use of the browser '''implemented?, if not, do we have specs?'''
* <s> In the event of service interruption to Sync, this must have no impact with current use of the browser. </s>
* In the event of service interruption, all data that should be synced will sync once service is restored in a way that is seamless to the user and without degradation to browser usage '''<= is this implemented? if not, do we have ux spec for this?'''
* {{done|}} In the event of service interruption, all data that should be synced will sync once service is restored in a way that is seamless to the user and without degradation to browser usage


=== Fx30 Migration ===
=== Fx30 Migration ===
Line 93: Line 91:
** AC 1.
** AC 1.
*** {{mok}} A new user installing Firefox for Android for the first time, there is at least one obvious entry point for setting up a Firefox Account that allows me to enable sync (whether from the promo banner or settings menu)
*** {{mok}} A new user installing Firefox for Android for the first time, there is at least one obvious entry point for setting up a Firefox Account that allows me to enable sync (whether from the promo banner or settings menu)
****ACTION: Set milestone for turning on promo banner
****ACTION: Set milestone for turning on promo banner. We need the banner to be intelligent until it has an API to talk to it so it knows that people have {{bug|917942}}
* {{mok}} As a user, I want a way to clearly understand what data Sync is actually Syncing, what that data means in terms of my browser functionality, and what happens to that data when I have logged out of my Firefox Account.
* {{mok}} As a user, I want a way to clearly understand what data Sync is actually Syncing, <s> what that data means in terms of my browser functionality, and what happens to that data when I have logged out of my Firefox Account. </s>
** AC 1.
** AC 1.
*** {{mprop}} Well worded messaging around the relevance of 'history' is explained or reworded to better reflect the benefit (which is consolidating awesomebar results regardless of the screen used to visit a website) '''elan is having trouble picturing this'''
*** {<s> Well worded messaging around the relevance of 'history' is explained or reworded to better reflect the benefit (which is consolidating awesomebar results regardless of the screen used to visit a website) </s>
** AC 2.  
** AC 2.  
*** {{mrisk}} Messaging to inform the user prior to starting the initial sync to ensure 'no surprises' '''How would we get this done?'''
*** <s> Messaging to inform the user prior to starting the initial sync to ensure 'no surprises' </s>
* {{mok}} As a user, I want to set up a Firefox Account using an email address and password of my choice, so I am not required to use any particular third-party sign-in service - I am comfortable using an email address of  my choice for this purpose.
* {{mok}} As a user, I want to set up a Firefox Account using an email address and password of my choice, so I am not required to use any particular third-party sign-in service - I am comfortable using an email address of  my choice for this purpose.
** AC 1.
** AC 1.
Line 106: Line 104:
** AC 3.
** AC 3.
*** {{mrisk}} If the password chosen does not adhere to Mozilla's password strength rules, messaging must be presented to the user clearly indicating the rules and allow them to try again
*** {{mrisk}} If the password chosen does not adhere to Mozilla's password strength rules, messaging must be presented to the user clearly indicating the rules and allow them to try again
* {{mprop}} As a user, I don't want to be forced to create a Firefox Account when I first start using Firefox, so I can start using the browser as quickly as possible once I've downloaded and installed it.
* {{done|}} As a user, I don't want to be forced to create a Firefox Account when I first start using Firefox, so I can start using the browser as quickly as possible once I've downloaded and installed it.
** AC 1.
** AC 1.
*** In the FxA setup flow, users must be able to cancel out of the flow
*** {{done|}} In the FxA setup flow, users must be able to cancel out of the flow
** AC 2.
** AC 2.
*** {{mok}} If a user does not chose to initiate or complete the FxA creation flow, the user can still use the browser without any change in browser functionality EXCEPT that they cannot enable sync
*** {{done|} If a user does not chose to initiate or complete the FxA creation flow, the user can still use the browser without any change in browser functionality EXCEPT that they cannot enable sync
* {{mok}} As a user, I want all of my data (history, bookmarks, etc.) to be saved on my local machine whether or not I've set up a Firefox Account, so I am  still able to build up a collection of data and personalize my Firefox  experience over time.
* {{done|}} As a user, I want all of my data (history, bookmarks, etc.) to be saved on my local machine whether or not I've set up a Firefox Account, so I am  still able to build up a collection of data and personalize my Firefox  experience over time.
** AC 1.
** AC 1.
*** No loss in current browser functionality in terms of storing history, passwords, etc whether a FxA has been created or not
*** No loss in current browser functionality in terms of storing history, passwords, etc whether a FxA has been created or not
* {{done|}} As a user, I want to be able to change the password for my Firefox Account data from any device that allows me to sign into my Firefox Account, so if someone does steal my  laptop or other mobile device they won't be able to access any ''new''  data that is added to my Sync Account, even though they will be able to  access the data that had been previously synced and is local on the  device.
* {{done|}} As a user, I want to be able to change the password for my Firefox Account data from any device that allows me to sign into my Firefox Account, so if someone does steal my  laptop or other mobile device they won't be able to access any ''new''  data that is added to my Sync Account, even though they will be able to  access the data that had been previously synced and is local on the  device.
** AC 1.
** AC 1.
*** There is an intuitive flow in the Settings / Sync menu that allows a user to change their FxA password
*** <s> There is an intuitive flow in the Settings / Sync menu that allows a user to change their FxA password </s>
** AC 2.
** AC 2.
*** Once password change, other screens logged into FxA must prompt the user at the earliest possible stage to enter the new password
*** {{done|}} Once password change, other screens logged into FxA must prompt the user at the earliest possible stage to enter the new password
** AC 3.
** AC 3.
*** Although current synced data cannot be undone, new data cannot be synced to other screens logged into FxA until the new password has been entered
*** {{done|}} Although current synced data cannot be undone, new data cannot be synced to other screens logged into FxA until the new password has been entered
* As a user, I want to be able to reset the password for my Firefox Account data from any device that allows me to sign into my Firefox Account, so I can continue using my Firefox Account even if I have forgotten my password.
* {{done|}} As a user, I want to be able to reset the password for my Firefox Account data from any device that allows me to sign into my Firefox Account, so I can continue using my Firefox Account even if I have forgotten my password.
** AC 1.
** AC 1.
*** {{mprop}}There is an intuitive flow in the Settings / Sync menu that allows a user to reset their FxA password
*** <s> There is an intuitive flow in the Settings / Sync menu that allows a user to reset their FxA password </s>
** AC 2.
** AC 2.
*** {{mprop}} Once password change, other screens logged into FxA must prompt the user at the earliest possible stage to enter the new password  
*** {{done|}} Once password change, other screens logged into FxA must prompt the user at the earliest possible stage to enter the new password  
** AC 3.
** AC 3.
**{{mprop}} * Although current synced data cannot be undone, new data cannot be synced to other screens logged into FxA until the new password has been entered
**{{done|}} * Although current synced data cannot be undone, new data cannot be synced to other screens logged into FxA until the new password has been entered
* {{mprop}} As a user, I want to be prompted to create a Firefox Account when I first install my browser, but I want it to be easy to dismiss with a prompt to dismiss either forever (so I don't get bothered again), or to be reminded again later.  I also want it to be very easy to get more details about what a Firefox Account is and why I would want it before I go through the process of creating one.
* {{mprop}} As a user, I want to be prompted to create a Firefox Account when I first install my browser, but I want it to be easy to dismiss with a prompt to dismiss either forever (so I don't get bothered again), or to be reminded again later.  I also want it to be very easy to get more details about what a Firefox Account is and why I would want it before I go through the process of creating one.
** AC 1.
** AC 1.
Line 188: Line 186:
*** Screens I have signed in to FxA with the same credentials are all attached to the same sync profile so that the data is replicated across all linked machines
*** Screens I have signed in to FxA with the same credentials are all attached to the same sync profile so that the data is replicated across all linked machines
** AC 3.
** AC 3.
*** Users cannot detect any performance differences between current sync and FxA+Sync1.1
*** Users cannot detect any performance differences between current sync and FxA+Sync1.5
* As a user with several devices, I want my core Firefox experience to be available on all devices, so I don't have to spend a lot of time rebuilding my top sites & awesome screen experience.
* As a user with several devices, I want my core Firefox experience to be available on all devices, so I don't have to spend a lot of time rebuilding my top sites & awesome screen experience.
** AC 1.
** AC 1.
Line 227: Line 225:
* As a user, I expect Firefox Sync to securely encrypt all my Firefox server data with my Firefox Account password.
* As a user, I expect Firefox Sync to securely encrypt all my Firefox server data with my Firefox Account password.
** AC 1.
** AC 1.
*** Data is encrypted as per current security standards
*** {{mok}} Data is encrypted as per current security standards
** AC 2.
** AC 2.
*** Data management must adhere to Mozilla security & privacy policies
*** {{mok}} Data management must adhere to Mozilla security & privacy policies


=== Performance & Stability ===
=== Performance & Stability ===
Line 238: Line 236:
*** Users must detect no change to browser performance when sync service is resumed and the backlog of sync data is being processed
*** Users must detect no change to browser performance when sync service is resumed and the backlog of sync data is being processed


=== Migration ===
=== [NOT MVP] Migration ===
* As a user who currently has an existing sync account with 2+ devices attached to it, I cannot migrate to FxA+Sync1.1 using the standard points of entry in Fx29 but I can find out what's going on.
* As a user who currently has an existing sync account with 2+ devices attached to it, I cannot migrate to FxA+Sync1.1 using the standard points of entry in Fx29 but I can find out what's going on.
** AC 1.
** AC 1.
Line 262: Line 260:


==Goals and Quality Criteria for Fx29==
==Goals and Quality Criteria for Fx29==
* FxA Sign up and sign in
* FxA set up and sign in
* No Send Tab
* No self-hosting, password only


==Goals and Quality Criteria for Fx30==
==Goals and Quality Criteria for Fx30==
Line 281: Line 281:
     "include_fields": "id, priority, summary, status, assigned_to, whiteboard",
     "include_fields": "id, priority, summary, status, assigned_to, whiteboard",
     "order": "bug_id"
     "order": "bug_id"
}
</bugzilla>
</onlyinclude>
=== Bugs that folks other than rnewman and nalexander can tackle ===
<onlyinclude>
<bugzilla>
{
    "include_fields": "id, priority, summary, status, assigned_to, whiteboard",
    "order": "bug_id",
    "product":"Android Background Services",
    "whiteboard": "parallel"
}
}
</bugzilla>
</bugzilla>
ErinL ancaster
canmove, Confirmed users, Bureaucrats and Sysops emeriti
5,401

edits

Retrieved from "https://wiki.allizom.org/Special:MobileDiff/928213...948471"