[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7529 [TorBirdy]: Make it possible to configure more of the default settings



#7529: Make it possible to configure more of the default settings
--------------------------------------+-------------------------------------
 Reporter:  pmt                       |          Owner:  ioerror
     Type:  enhancement               |         Status:  new    
 Priority:  normal                    |      Milestone:         
Component:  TorBirdy                  |        Version:         
 Keywords:  torbirdy, date, settings  |         Parent:         
   Points:                            |   Actualpoints:         
--------------------------------------+-------------------------------------

Comment(by pmt):

 > > So I would love if you could make the enforcement of (at least) that
 setting configurable,
 > > like '--throw-keyids' for enigmail.
 >
 > So you want an opt-out from the time zone part, where we set everything
 to UTC?

 Exactly.

 > While in theory I have no problem doing that, my only concern is whether
 we ''should'' be
 > allowing such a potentially dangerous opt-out, because it will leak the
 time zone.

 Leaking the timezone being a problem depends on the attack vector you
 have. I totally agree, that it should not leak by default. However, having
 everything in UTC might also be very confusing and for people it might be
 more important to have dates displayed that make sense for them, than
 hiding their timezone. Why? Because their main interest in TorBirdy is to
 not reveal their ip address and timezone information might already be
 known through other channels.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7529#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs