[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #26341 [Applications/Tor Browser]: Enable setting torbutton.use_nontor_proxy with an environment variable



#26341: Enable setting torbutton.use_nontor_proxy with an environment variable
--------------------------------------+-----------------------------------
 Reporter:  eyedeekay                 |          Owner:  tbb-team
     Type:  enhancement               |         Status:  needs_information
 Priority:  Low                       |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Trivial                   |     Resolution:
 Keywords:  tbb-torbutton             |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------

Comment (by eyedeekay):

 OK, so I have taken steps to make sure that I do not misleadingly
 represent this browser configuration based on the Tor Browser as a real
 Tor Browser. Foremost, I've replaced the welcome page completely to
 indicate that it's an i2p browser, with a clear warning "i2p does not do
 domain isolation" with a brief explanation that you will have the same
 identity for all your activity in this browser(page is here:
 https://github.com/eyedeekay/i2p-browser-for-cheaters/blob/master/i2p-
 diffs.html). It may change, but that message will still be conveyed. This
 will be presented 100% of the time when a user starts our i2p browser.
 Besides that, we pass a different wm_class to firefox. I even created a
 re-branding plugin(https://github.com/eyedeekay/ui2pbrowser_branding)
 (just a fork of iceweasel's) that I'd love to be able to use, and am
 investigating paths to using, however there are complications on the path
 to doing this which will take time to overcome. It is something I will
 continue to work on. I hope that this helps to make my patch more
 acceptable.

 As for isolation, for now the approach is warn visibly about the shared
 identity across browser tabs and visibly delineate the differences between
 this and the standard TBB. My motivation for choosing the Tor Browser is
 hardening against metadata leakage and and lowered ability to deduce
 system characteristics using browser features. Even without domain
 isolation, TBB still seems to be the best choice.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26341#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs