[tor-bugs] #20264 [Applications/Tor Browser]: Reduce number of security slider states from 4 to 3 (proposed)
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Oct 7 11:50:15 UTC 2016
#20264: Reduce number of security slider states from 4 to 3 (proposed)
--------------------------------------+--------------------------
Reporter: arthuredelstein | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: tbb-security-slider | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by bugzilla):
Replying to [ticket:20264 arthuredelstein]:
> Something we talked about at the Seattle meeting is the possibility of
having only 3 allowed security slider states: Low, Medium and High.
Lo-Mid-Hi, let's make security as easy as consumer-grade electronics :)
(No, it will never be as easy, it's just a false sense of security.)
> We would migrate users at Medium-Low to Medium-High and rename the
latter to Medium. It seems such a change would improve usability and
security.
Usability - by removing two-word names :), security - by removing one JS-
MitM-enabled position, and privacy - by reducing fingerprinting.
> Also I think the current Medium-High is probably the best compromise for
most users who are sophisticated enough to adjust the security slider.
You think correctly, but it shows that TBB is still a compromise :(. Every
higher setting should include everything from previous (including
flexibility) and shouldn't degrade in security options (I'll file separate
tickets for those issues).
> Discuss! :)
The other teams prohibit to use bugtracker for discussions, but TBB Team
encourages :)
(It's good when no forum, but could be bad when no moderation.)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20264#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list