[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #18944 [Applications/Tor Browser]: Remove block-malicious-sites-checkbox on TLS error page



#18944: Remove block-malicious-sites-checkbox on TLS error page
--------------------------------------------+--------------------------
 Reporter:  gk                              |          Owner:  tbb-team
     Type:  defect                          |         Status:  new
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  ff45-esr, TorBrowserTeam201605  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by gk):

 The first thing is We are not in the business of identifying and blocking
 malicious sites. We actually disabled that feature. Second, I see no
 reason why Mozilla should gather data related to a Tor Browser user.
 Third, this message is highly confusing in our context. Say, an exit node
 is MITMing a user. Why should the user report that to Mozilla in order to
 identify and block malicious sites? What is Mozilla supposed to do with
 that information?

 We can think about ways to deal with MITM attacks in Tor Browser but that
 would be another ticket and would need at least a repurposed checkbox.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18944#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs