Opened 5 years ago

Closed 5 years ago

#7529 closed enhancement (fixed)

Make it possible to configure more of the default settings

Reported by: pmt Owned by: ioerror
Priority: Medium Milestone:
Component: Applications/TorBirdy Version:
Severity: Keywords: torbirdy, date, settings
Cc: sukhbir.in@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Torbirdy sets a set of new default values, actually to my understanding it even enforces them.

This might be reasonable for most of the settings, however for other settings user might be interested to not follow TorBirdy's governance.

Any example is mailnews.display.original_date, which ist set to to true.
However, this has the effect that the date/time of a mail is not anymore displayed in the user's timezone.

While this might be useful to hide details revealing the location of a user (I suspect this is enforced, because this date is later used in replies), it might not be preferable for all users, as people get a false intention, when they received a certain mail.

So I would love if you could make the enforcement of (at least) that setting configurable, like '--throw-keyids' for enigmail.

Child Tickets

Change History (4)

comment:1 in reply to:  description ; Changed 5 years ago by sukhbir

Cc: sukhbir.in@… added

Replying to pmt:

Torbirdy sets a set of new default values, actually to my understanding it even enforces them.

Correct.

While this might be useful to hide details revealing the location of a user (I suspect this is enforced, because this date is later used in replies), it might not be preferable for all users, as people get a false intention, when they received a certain mail.

So I would love if you could make the enforcement of (at least) that setting configurable, like '--throw-keyids' for enigmail.

So you want an opt-out from the time zone part, where we set everything to UTC?

While in theory I have no problem doing that, my only concern is whether we should be allowing such a potentially dangerous opt-out, because it will leak the time zone.

comment:2 in reply to:  1 ; Changed 5 years ago by pmt

So I would love if you could make the enforcement of (at least) that setting configurable,
like '--throw-keyids' for enigmail.

So you want an opt-out from the time zone part, where we set everything to UTC?

Exactly.

While in theory I have no problem doing that, my only concern is whether we should be
allowing such a potentially dangerous opt-out, because it will leak the time zone.

Leaking the timezone being a problem depends on the attack vector you have. I totally agree, that it should not leak by default. However, having everything in UTC might also be very confusing and for people it might be more important to have dates displayed that make sense for them, than hiding their timezone. Why? Because their main interest in TorBirdy is to not reveal their ip address and timezone information might already be known through other channels.

comment:3 in reply to:  2 Changed 5 years ago by sukhbir

Replying to pmt:
I just added support for opting-out of the UTC setting. If you change the (new) preference (in privacy settings), Thunderbird will use the local time zone. The changes have been pushed to the repository, so you can test it from there.

I agree, even though most users should not be changing this (and we warn them when they try to change preferences anyways), but if someone wants to, they can change it now.

comment:4 Changed 5 years ago by sukhbir

Resolution: fixed
Status: newclosed

Fixed. https://github.com/ioerror/torbirdy/blob/master/ChangeLog#L11

Though you do have to quit Thunderbird and start it again (restarting it from the extension will not help), because otherwise the environment variable TZ is not set.

Note: See TracTickets for help on using tickets.