Opened 3 weeks ago

Last modified 3 weeks ago

#33625 new enhancement

Disallow usage of Tor Browser until it is determined that the version is not the most recent

Reported by: cypherpunks Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: TorBrowserTeamTriaged, ux-team
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

It is currently possible to use TB before and while downloading update. It is a grave security risk in case of 1-days.

It is proposed to disallow navigation in the following cases:
1 update is available, containing vulnerabilities fixes, but not yet installed. In this case update downloading progress should be displayed and the list of vulnerabilities fixed in the update.
2 It is unknown whether update is available.

In all cases the message must contain some text explaining why it is important to wait until the update process is finished.

Child Tickets

Change History (1)

comment:1 Changed 3 weeks ago by pili

Keywords: TorBrowserTeamTriaged ux-team added
Severity: BlockerNormal
Type: defectenhancement

Thanks for the enhancement request. We will review this with our UX team.

Note: See TracTickets for help on using tickets.