[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #9387 [Tor Launcher]: Tor Launcher/Torbutton should provide a "Security Slider"

#9387: Tor Launcher/Torbutton should provide a "Security Slider"
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  brade
  mikeperry              |     Status:  new
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  tbb-security, tbb-usability, tbb-
    Component:  Tor      |  linkability, tbb-3.0, extdev-interview
  Launcher               |  Parent ID:
   Resolution:           |
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by mikeperry):

 Hrmm. Ok, well we filed #12653 as the parent ticket for the JIT options.
 To get this ticket back on track, here's my current thoughts on the
 security slider based on iSec's input and our current contract with
 Giorgio for NoScript:

 {{{
 Low (default)
  - gfx.font_rendering.opentype_svg.enabled -> false
  - gfx.font_rendering.graphite.enabled -> disable for Latin locales
 Medium-Low
  - javascript.options.ion.content -> false
  - javascript.options.typeinference -> false
  - javascript.options.asmjs -> false
  - noscript.forbidMedia -> true
  - media.webaudio.enabled -> false
 Medium-High
  - javascript.options.baselinejit.content -> false
  - Disable JS for non HTTPS URL Bars -> NoScript pref currently in
 development
  - Disable SVG (requires iSec Patch)
  - gfx.font_rendering.graphite.enabled -> disable for non-Latin locales
 High
  - Block remote fonts. One of:
    - gfx.downloadable_fonts.enabled -> false
    - noscript.forbidFonts -> true
  - Disable all JS
    - noscript.global -> false
  - Disable all codecs except WebM (click-to-play)
    - media.ogg.enabled -> false
    - media.opus.enabled -> false
    - media.wave.enabled -> false
    - media.apple.mp3.enabled -> false
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9387#comment:43>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs