Put a banner when detecting old versions of the Tor Browser on the website advising to update

This is in the same spirit that Mozilla does, for example: https://www.mozilla.org/en-US/security/advisories/mfsa2017-22/

Your Firefox is out-of-date.

Get the most recent version to keep browsing securely.
Update Firefox

changed milestone to %website redesign

added component::webpages/styleguide milestone::website redesign owner::hiro parent::30037 priority::medium reviewer::antonela severity::normal status::needs-information type::enhancement ux-team labels

We've been wanting to be better with urging users to update their Tor Browser. There are many ideas floating around, and this is another great one. I'll discuss this idea at the next UX ticket triage.

Trac:
Cc: linda to linda, brade, mcs

Firefox is including its version number in the UserAgent string, so it is easy for a website to detect if Firefox is up to date. In Tor Browser however, we are only including the major version number, and not the minor version number, so it is more difficult for a website to know if Tor Browser is up to date.

Replying to boklm:

Firefox is including its version number in the UserAgent string, so it is easy for a website to detect if Firefox is up to date. In Tor Browser however, we are only including the major version number, and not the minor version number, so it is more difficult for a website to know if Tor Browser is up to date. I'm talking about the case where the released Tor Browser is based on 52 ESR whereas someone still uses 45 ESR. Of course, only a very tiny portion of people may happen on it but it's still better to have it. The more important case would be #23735 (moved).

This could also be documented in the styleguide? Maybe it could even be something that someone running an onion service could implement easily.

Trac:
Milestone: N/A to website redesign

I wonder how to implement this best. For static pages i can think of JS or do we want to use Server Side Includes?

Trac:
Status: new to needs_information
Owner: N/A to hiro
Component: Webpages/Website to Webpages/Styleguide
Reviewer: N/A to antonela

Trac:
Parent: N/A to #30037 (closed)

I think a web page cannot easily find the Tor Browser version being used, and we probably don't want to make it easy as that would be a fingerprinting vector.

mentioned in issue #23735 (moved)

mentioned in issue #25694 (moved)

mentioned in issue #30037 (closed)

moved to tpo/web/styleguide-trac#23721 (moved)

mentioned in issue tpo/web/styleguide-trac#23735 (closed)