Opened 4 years ago

Closed 3 years ago

#15018 closed defect (fixed)

download warnings say not to download pdf files, but don't mention pdf.js

Reported by: arma Owned by: Sebastian
Priority: Medium Milestone:
Component: Webpages/Website Version:
Severity: Normal Keywords:
Cc: mikeperry, gk Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Right now our download warning text says:

Don't open documents downloaded through Tor while online

The Tor Browser will warn you before automatically opening documents that are
handled by external applications. DO NOT IGNORE THIS WARNING. You should be
very careful when downloading documents via Tor (especially DOC and PDF files)
as these documents can contain Internet resources that will be downloaded
outside of Tor by the application that opens them. This will reveal your
non-Tor IP address. If you must work with DOC and/or PDF files, we strongly
recommend either using a disconnected computer...

We should update it to say that the built-in pdf.js is ok. Otherwise users will misunderstand what we think is ok and not ok, which could undermine whether they listen to our other recommendations.

Child Tickets

Change History (4)

comment:1 Changed 4 years ago by arma

Cc: mikeperry gk added

Cc'ing some Tor Browser folks so they can weigh in.

comment:2 Changed 4 years ago by gk

Sounds like a good idea to me. There is still #7501 I'd like to do, but given that PDF.js does not interpret JavaScript in PDF documents and is inside the browser using its network stack it is misleading treating DOC and PDF files alike (as long as the latter *are* opened with the browser built-in viewer and not some external tool).

comment:3 Changed 3 years ago by Sebastian

Severity: Normal

Hrm, #7501 is still not resolved but I'm going to do this anyway. That long text needs to go away tho :/

comment:4 Changed 3 years ago by Sebastian

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.