[tor-bugs] #25658 [Applications/Tor Browser]: Activity 2.1: Improve user understanding and user control by clarifying Tor Browser's security features

[Tor Bug Tracker & Wiki]

#25658: Activity 2.1: Improve user understanding and user control by clarifying Tor
Browser's security features
-------------------------------------------------+-------------------------
 Reporter:  isabela                              |          Owner:
                                                 |  antonela
     Type:  project                              |         Status:
                                                 |  needs_revision
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ux-team, GeorgKoppen201812,          |  Actual Points:
  TorBrowserTeam201903R, tbb-8.5                 |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor17
-------------------------------------------------+-------------------------

Comment (by antonela):

 Replying to [comment:86 mcs]:

 > This is an impressive piece of work. Kathy and I finished reviewing the
 tor-browser changes as well as the overall behavior. We are still working
 on our review of the torbutton changes but hope to post our comments later
 today. Here are our comments on behavior (most of these are for Antonela
 to look at):
 >
 It is! Thanks for this review mcs/brade!


 > 1. It would be nice to have a dynamic tooltip for the toolbar item so
 that the active level is visible, e.g., `Security Level: Safer`
 >
 Yes, it shouldn't be so hard. To be clear, do you mean a label at the
 toolbar? Or a good copy that replaces this `Security Settings`?
 https://share.riseup.net/#IVhf0vupZqeSezuQSBzTGg. If is the second, then
 your suggestion is great.


 > 2. It would be nice to eliminate "slider" everywhere, including from the
 `Learn more` link. That will require some coordination with the
 maintainers of tb-manual.torproject.org. Maybe use https://tb-
 manual.torproject.org/.../security-settings.html
 >
 Agreed. I'm syncing with Maggie from the community team this week to have
 the Manual updated as well.



 > 3. The Marvel app design uses the term `Default` instead of `Standard`.
 Am I looking at the wrong design?
 >
 You are looking at the right design, and I think we should keep the same
 labels we have now. Defaults are negotiable and `Standard` works better
 for this scenario.



 > 4. The Marvel app design has an disclosure arrow (`>`) in the panel for
 "Advanced Security Settings". Is that important to include in the
 implementation?
 >
 You right. We are using the `...` to announce the navigation. I think we
 are ok. It aims to replicate the Firefox pattern we have at the Control
 Center doorhanger.



 > 5. If custom mode is triggered, it is a little confusing that there is
 no text in about:preferences to encourage the user to switch back to one
 of the default levels (new users may even think custom is a good thing).
 Also, there is nothing in about:preferences that associates the `Restore
 Defaults` button with fixing the "custom problem." Finally, we might want
 to hide the `Restore Defaults` button when it is not applicable instead of
 disabling it (I think users will wonder why it is disabled). These issues
 might be worth looking at in future iteration.
 >
 Good call. We included the revert action for custom settings at the
 doorhanger. I think we can easily add the `Restore defaults` blue primary
 link at the selected level in `about:preferences` too.


 > 6. On macOS at least, the toolbar layout does not match the proposal.
 With a clean profile, the Torbutton icon is on the left side of the
 toolbar instead of the right side and the NoScript and HTTPS-E icons are
 present.
 >

 I got the same issue before and I think is because somehow we are sharing
 profiles between stable configuration and nightly one. Since I have more
 than a dozen Tor Browsers installed in my computer, I cannot debug this
 properly.


 > 7. Related to 6., after upgrading from an 8.5a8 profile, there is one
 additional problem: the security settings icon is missing from the
 toolbar.
 >
 I think this one was fixed on a recent commit. pospeselr?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25658#comment:89>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online