Opened 2 years ago

Last modified 2 years ago

#18027 new enhancement

Tor Browser canvas fingerprint pop up should have "not ever" option and timeout

Reported by: Aranjedeath Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability
Cc: ra Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Hi.

Currently, when accessing a site Tor Browser thinks is doing canvas fingerprinting, it pops up a little thing asking if you'd like to allow it:

  1. not now (default)
  2. never for this site
  3. allow in the future

This is excellent, and I'm super excited we're given such granular choices.

I'd like an additional option, which is:

  1. Block all canvas fingerprinting, on any site, ever.

There exists no scenario where I wish to be fingerprinted through canvas feature usage. I've spoken to others who feel the same.

It makes sense to me to place it either in the about:config or the security slider (perhaps enabled at any setting higher than "low").

Child Tickets

Change History (6)

comment:1 Changed 2 years ago by cypherpunks3

I can recall needing to enable the canvas stuff on two sites: twitter, to upload a userpic (it requires you to crop the image using a canvas-based image editing thing) and some meme generator (which apparently composits the text over images in-browser).

With the current warning, though, I'm pretty sure the vast majority of tor browser users would just assume these sites are broken and have no idea that it has anything to do with that irritating box that always pops up. So +1 from this anon for a "nevar again" option (though it should still show the little easel icon in the url bar from which it can be allowed sometimes).

comment:2 Changed 2 years ago by gk

Keywords: tbb-usability added

comment:3 Changed 2 years ago by bugzilla

Priority: LowMedium
Summary: Tor Browser canvas fingerprint pop should have "not ever" optionTor Browser canvas fingerprint pop up should have "not ever" option and timeout

Users definitely don't like pop ups! And most of them don't know what to do with this one.
So it is better to set a several seconds timeout timer for this pop up to disappear. Pro users can always click it to pop up again.

comment:4 Changed 2 years ago by bugzilla

Parent ID: #12682

Oops, disappearing of the pop up without users' answer scares some of them, but is preferred by others.

Last edited 2 years ago by bugzilla (previous) (diff)

comment:5 Changed 2 years ago by gk

Parent ID: #12682

comment:6 Changed 2 years ago by ra

Cc: ra added
Note: See TracTickets for help on using tickets.