Opened 8 years ago

Closed 3 years ago

#6042 closed defect (fixed)

Rate limit 'new identity' clicks?

Reported by: arma Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability, tbb-newnym, tor-client, tbb-torbutton
Cc: nickm Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

#6040 reminded me that Vidalia rate limits the clicking on 'new identity', but from my brief tests it looks like Torbutton doesn't?

This is relevant because *Tor* rate limits the clicking (click 'new identity' a few times in a row in Torbutton, then look at your Vidalia message log), which could produce who knows what weird interactions between Torbutton's impression of Tor's state and Tor's reality.

Child Tickets

Change History (6)

comment:1 Changed 8 years ago by mikeperry

I want people to be able to clear browser state as often as they like. The button should never go grey for that. How do we reconcile that with the Tor machinery underneath?

comment:2 Changed 7 years ago by mikeperry

Keywords: tbb-usability added
Priority: majorminor

comment:3 Changed 7 years ago by mikeperry

Any solution that involves preventing the user from clearing browser state is off the table here. We either ignore the user, or annoy them with a popup (which they will ignore and grow to hate).

comment:4 Changed 6 years ago by arma

Cc: nickm added
Keywords: tbb-newnym tor-client added
Priority: minornormal

This is definitely a usability mismatch between TB and Tor.

comment:5 Changed 6 years ago by erinn

Component: TorBrowserButtonTor Browser
Keywords: tbb-torbutton added
Owner: changed from mikeperry to tbb-team

comment:6 Changed 3 years ago by lunar

Resolution: fixed
Severity: Normal
Status: newclosed

The “New Identity” button in Tor Browser will give a popup asking if users want to actually close all their tabs and all, so in some ways this is already rate limiting, but more importantly, Tor Browser is not using NEWNYM anymore (instead its using SOCKS authentication) therefore its not limited anymore in how frequent an identity change can happen. So, closing.

Note: See TracTickets for help on using tickets.