[tbb-bugs] #19735 [Applications/Tor Browser]: replace disconnect with duckduckgo

[Tor Bug Tracker & Wiki]

#19735: replace disconnect with duckduckgo
--------------------------------------+--------------------------
 Reporter:  f451022                   |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-usability             |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by mikeperry):

 * keywords:   => tbb-usability
 * owner:   => tbb-team
 * component:  - Select a component => Applications/Tor Browser


Comment:

 I was going to switch this for the release next week, but I realized that
 DuckDuckGo does not automatically handle the Javascript-disabled case.

 In my ideal world, we would replace Disconnect with a search engine that
 provided a javascript experience for users with javascript enabled, but
 automatically fell back to the HTML version if javascript was disabled.

 As for the hidden service being the default or not, I am leaning towards
 not, for the following reasons:

 1. For medium-high security Tor Browser users, they will get the non-
 Javascript version of the hidden service, since it is not https. I think
 the right answer here is an EV cert for the HS (which will also help with
 user confusion).
 2. It's not clear that the duckduckgo .onion is using SingleOnionServices,
 OnionBalanace, and other optimizations that are likely needed to handle
 our full userbase.

 I may still switch the default search to the javascript HTTPS version of
 DuckDuckGo in the meantime for the 6.5 alpha, though.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19735#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online