[tor-bugs] #6021 [TorBirdy]: disable addons
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Thu May 31 21:47:34 UTC 2012
#6021: disable addons
----------------------+-----------------------------------------------------
Reporter: proper | Owner: ioerror
Type: defect | Status: new
Priority: critical | Milestone:
Component: TorBirdy | Version:
Keywords: | Parent:
Points: | Actualpoints:
----------------------+-----------------------------------------------------
There are a few addons installed on Ubuntu by default installation.
* EDS Contacts Integration for Thunderbird
* Global Menu Bar integration
* Messaging Menu and Unity Launcher integration
Some of them might be risky.
For example "Messaging Menu and Unity Launcher integration" syncs with the
Evolution Data Server (EDS). And the EDS possibly syncs with Google and/or
Ubuntu One. ([http://mikeconley.ca/blog/2011/08/08/eds-contacts-
integration-for-thunderbird/ source of that information])
Contacts from Thunderbird/TorBirdy should not be uploaded and stored
unencrypted in any cloud.
My suggestions is, do it like TorButton, deactivate most addons. Perhaps
with the exception of enigmail (#6019) and mixgui (#6020). Allow users to
override the function, at least through an about:config setting.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6021>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list