[tbb-bugs] #25197 [Applications/Tor Browser]: Design document isn't precise about "Security" and "Privacy".

[Tor Bug Tracker & Wiki]

#25197: Design document isn't precise about "Security" and "Privacy".
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-spec                  |  Actual Points:
Parent ID:  #25021                    |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by traumschule):

 comment:5:ticket:25021 mentions to explain better why extensions can be
 harmful, both for security (preventing exploits) and preventing
 fingerprintability as one danger to privacy, next to leaks of personal
 information. Maybe this is good example to differentiate these concepts.

 Also trackers are a tricky topic that should be covered because
 "deactivate javascript" is the common answer to browse more safely (higher
 security), but it leads to the wrong assumption, that it helps against
 tracking (privacy) while IIUC it does not help against web bugs like
 hidden images or other resources on third party domains etc (only if
 loaded by scripts).

 This is especially important because many users (including myself) are
 trained to install "essential extensions" for privacy:
 https://riseup.net/en/better-web-browsing
 https://riseup.net/en/security/network-security/better-web-browsing
 /browser-score-card

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25197#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online