Re: Confusion about TorButton, Noscript, etc.

["Marco Bonetti" <marco.bonetti@xxxxxxxxxxxx>]

On Mon, August 18, 2008 09:57, Marco Bonetti wrote:
> What do you think? (maybe we should also invite Maone on this topic)
I wrote to Maone about this issue, pointing him to the or-talk archives.

He replied with some interesting ideas, I'll report them here:

1) user actions
The user can enable/disable javascripts globally from the Tool (or Edit)
-> Options -> Content checkbox or toggling the state of QuickJava (
https://addons.mozilla.org/en-US/firefox/addon/1237 ) button before
enabling Tor

2) TorButton action
The TorButton extension can switch to "false" the javascript.enabled
configuration option, NoScript will not be angry about it :)

3) NoScript action
NoScript can lookup if TorButton has been enabled, this way it will only
whitelists sites that are both under the user whitelist AND are providing
a valid SSL certificate

My ideas regarding points 1 and 2: I haven't read the torbutton source
code, does it toggle the state of javascript.enabled? I think so,
especially after reading this bug report
https://bugzilla.mozilla.org/show_bug.cgi?id=409737 however, with
javascripts disabled the NoScript extension should be all ok and not
causing problems.

-- 
Marco Bonetti
Slackintosh Linux Project Developer: http://workaround.ch/
Linux-live for powerpc: http://workaround.ch/pub/rsync/mb/linux-live/
My webstuff: http://sidbox.homelinux.org/

My GnuPG key id: 0x86A91047