[tbb-bugs] #7255 [Tor Browser]: Prompt if Tor Browser is Maximized

[Tor Bug Tracker & Wiki]

#7255: Prompt if Tor Browser is Maximized
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  tbb-team
  mikeperry              |     Status:  needs_information
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Tor      |   Keywords:  tbb-fingerprinting-resolution, tbb-
  Browser                |  usability, tbb-bounty, tbb-torbutton
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------
Changes (by arthuredelstein):

 * status:  new => needs_information
 * cc: arthuredelstein, gk (added)


Comment:

 With my latest proposed patch in #14429, browser window dimensions are
 quantized to 200x100. So, assuming we use that patch, what kind of warning
 would be appropriate?

 1. Presenting a one-time notification dialog that just explains that the
 browser dimensions are quantized, and why.

 2. Display a dialog that recommends that the user not change the window
 size, and present a "cancel" button that lets the user abort the resizing
 action before it reveals the new window size to content scripts.

 Alternative 2 probably offers a little extra anonymity to those users who
 heed the recommendation, and a little less anonymity for those users who
 choose to ignore it (but whose windows remain quantized). On the other
 hand, the window size already varies on window creation, depending on the
 user's screen size, because of the algorithms here:
 https://gitweb.torproject.org/mikeperry/torbutton.git/tree/src/chrome/content/torbutton.js?h=1.5-next#n2201
 so I'm not sure Alternative 2 provides much more safety than Alternative
 1.

 I would welcome any opinions!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7255#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online