[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #9196 [EFF-HTTPS Everywhere]: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice & control)
#9196: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice
& control)
----------------------------------+-----------------------------------------
Reporter: pde | Owner: lisacyao
Type: defect | Status: new
Priority: blocker | Milestone: HTTPS-E 3.3
Component: EFF-HTTPS Everywhere | Version:
Keywords: | Parent:
Points: | Actualpoints:
----------------------------------+-----------------------------------------
Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be ready
for the other when Firefox 23 ships. On the Mozilla side, we need a fix
for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing too
early in the request pipeline], and on the HTTPS Everywhere side we need
to correctly [label https://trac.torproject.org/projects/tor/ticket/8774]
and [disable https://trac.torproject.org/projects/tor/ticket/8776] those
rulesets.
For power users this isn't a problem, because they can live with broken
CSS or manually allow mixed content. But for most of our users this is
catastrophic.
So we will ship a patch which temporarily disables the MCB about:config
setting if your Mozilla version is 23, but which pops a NotificationBox
offering more information and letting you turn it back on if you'd like
to.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9196>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs