The PICL Authentication/Keyserver provides an API for provisioning and authenticating PICL users. It uses email and password for authentication. It also: * facilitates the retrieval and derivation of the user's data encryption keys * signs a user's public key which is used to create BrowserID assertions for authenticating to the PICL Storage Server * implements an API for password reset Dev server: http://idp.profileinthecloud.net Code and API docs: https://github.com/mozilla/picl-idp Protocol details: https://wiki.mozilla.org/Identity/AttachedServices/KeyServerProtocol It would be great to start collaborating on the implementation of an Android client for this API.

We've reorganized the public API (esp. naming) to be more 'dev-friendly'. Follow the WIP here: https://github.com/mozilla/picl-idp/pull/69 We've also added API calls to address email verification after signup. Comments are welcome.

Adding some QA names...

This bug tracks implementing Java HTTP client that talks to a picl-idp server to create new accounts, fetch salts and keys, and sign certificates.

Over to rnewman for preliminary feedback (on the client patches).

This feels pretty good to me. Let's rebase on top of crypto changes before I take another look?

Re-factored, simplified, and battle hardened. It's a bit hard to test (even live), but it's working well against localhost and in my Sync 1.1 + FxA tree. Mostly want to see if anything jumps out at you.

Comment on attachment 819990 [details] FxAccountClient, V2. Comments left on GitHub.

Comment on attachment 819990 [details] FxAccountClient, V2. r=rnewman on github.

Secreview happening in bug 942336.

Leaving as Resolved given the number of open Depends on bugs