Opened 12 years ago

Last modified 12 years ago

#530 closed enhancement (Not a bug)

optional warning when making connections while torbutton is disabled

Reported by: anonym Owned by:
Priority: Low Milestone:
Component: Applications/Torbutton Version: 1.1
Severity: Keywords:
Cc: anonym, nickm, arma, mikeperry Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I am a contributor to the incognito project (link below) which is aims for creating a liveCD offering anonymity for
the masses through tor. We are currently considering to switch from NoScript+CookieCuller to torbutton because of
usability issues. Another reason is that deactivating tor through torbutton would be an easy and consistent way
for users to temporarily be able to access the network directly which sometimes is required by ISP logins and
similar. But for this we would require a clear indicator that tor currently isn't used and some mechanism that
prevents users from making insecure connections.

One way we have thought about this would be if torbutton would have an option that, when enabled, prompts the
user whenever he or she clicks a link/enters a URL etc, stating that the connection will be insecure and
presenting the user with the option to either go on with the insecure connection or to switch torbutton on and
make a secure connection (or cancel, I guess).

We realize that some might consider this as just adding extra bloat to torbutton's configuration, but we consider
this to be quite useful (if not crucial) in contexts where tor should be used by default and direct connections
are exceptions.

Incognito link: http://www.patdouble.com/index.php?option=com_content&task=blogsection&id=3&Itemid=6

[Automatically added by flyspray2trac: Operating System: All]

Child Tickets

Change History (7)

comment:1 Changed 12 years ago by anonym

I have no idea why the original message was formatted that way (because I pasted the text into the text box?)

but here's the text in a (hopefully) more readable format:


I am a contributor to the incognito project (link below) which is aims for creating a liveCD offering anonymity

for the masses through tor. We are currently considering to switch from NoScript+CookieCuller to torbutton

because of usability issues. Another reason is that deactivating tor through torbutton would be an easy and
consistent way for users to temporarily be able to access the network directly which sometimes is required by

ISP logins and similar. But for this we would require a clear indicator that tor currently isn't used and

some mechanism that prevents users from making insecure connections.

One way we have thought about this would be if torbutton would have an option that, when enabled, prompts the user
whenever he or she clicks a link/enters a URL etc, stating that the connection will be insecure and presenting the user
with the option to either go on with the insecure connection or to switch torbutton on and make a secure connection
(or cancel, I guess).

We realize that some might consider this as just adding extra bloat to torbutton's configuration, but we consider
this to be quite useful (if not crucial) in contexts where tor should be used by default and direct connections
are exceptions.

Incognito link: http://www.patdouble.com/index.php?option=com_content&task=blogsection&id=3&Itemid=6

comment:2 Changed 12 years ago by anonym

Ok. I give up. Sorry for this. Is there no way to edit task details/comments?

comment:3 Changed 12 years ago by nickm

(fixed it for you. in the future, hit return at the end of each line. line wrapping seems unimplemented.)

comment:4 Changed 12 years ago by mikeperry

This would be done via the nsIContentPolicy, but it is explicitly recommended against in the mozilla API documentation for that class (probably for locking reasons):

http://www.xulplanet.com/references/xpcomref/ifaces/nsIContentPolicy.html

comment:5 Changed 11 years ago by mikeperry

FYI, Torbutton has a 'locked mode' which is a hidden about:config option that blocks toggle via single-click if
set (you can still right click and toggle state). 'extensions.torbutton.locked_mode'. Do you think this is
sufficient, or is the (inevitably extremely annoying : ) warning per-page more desirable?

comment:6 Changed 11 years ago by anonym

This is no longer needed. As far as I'm concerned this case is closed. Thank you!

comment:7 Changed 11 years ago by mikeperry

flyspray2trac: bug closed.
User is satisfied

Note: See TracTickets for help on using tickets.