[tor-bugs] #9196 [EFF-HTTPS Everywhere]: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice & control)

[Tor Bug Tracker & Wiki]

#9196: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice
& control)
----------------------------------+-----------------------------------------
 Reporter:  pde                   |          Owner:  lisacyao   
     Type:  defect                |         Status:  new        
 Priority:  blocker               |      Milestone:  HTTPS-E 3.3
Component:  EFF-HTTPS Everywhere  |        Version:             
 Keywords:                        |         Parent:             
   Points:                        |   Actualpoints:             
----------------------------------+-----------------------------------------
 Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be ready
 for the other when Firefox 23 ships.  On the Mozilla side, we need a fix
 for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing too
 early in the request pipeline], and on the HTTPS Everywhere side we need
 to correctly [label https://trac.torproject.org/projects/tor/ticket/8774]
 and [disable https://trac.torproject.org/projects/tor/ticket/8776] those
 rulesets.

 For power users this isn't a problem, because they can live with broken
 CSS or manually allow mixed content.  But for most of our users this is
 catastrophic.

 So we will ship a patch which temporarily disables the MCB about:config
 setting if your Mozilla version is 23, but which pops a NotificationBox
 offering more information and letting you turn it back on if you'd like
 to.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9196>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online