[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #9196 [EFF-HTTPS Everywhere]: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice & control)

#9196: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice
& control)
----------------------------------+-----------------------------------------
 Reporter:  pde                   |          Owner:  lisacyao   
     Type:  defect                |         Status:  new        
 Priority:  blocker               |      Milestone:  HTTPS-E 3.3
Component:  EFF-HTTPS Everywhere  |        Version:             
 Keywords:                        |         Parent:             
   Points:                        |   Actualpoints:             
----------------------------------+-----------------------------------------
Description changed by pde:

Old description:

> Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be
> ready for the other when Firefox 23 ships.  On the Mozilla side, we need
> a fix for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing
> too early in the request pipeline], and on the HTTPS Everywhere side we
> need to correctly [https://trac.torproject.org/projects/tor/ticket/8774
> label] and [https://trac.torproject.org/projects/tor/ticket/8776 disable]
> those rulesets.
>
> For power users this isn't a problem, because they can live with broken
> CSS or manually allow mixed content.  But for most of our users this is
> catastrophic.
>
> So we will ship a patch which temporarily disables the MCB about:config
> setting if your Mozilla version is 23, but which pops a NotificationBox
> offering more information and letting you turn it back on if you'd like
> to.

New description:

 Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be ready
 for the other when Firefox 23 ships.  On the Mozilla side, we need a fix
 for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing too
 early in the request pipeline], and on the HTTPS Everywhere side we need
 to correctly [https://trac.torproject.org/projects/tor/ticket/8774 label]
 and [https://trac.torproject.org/projects/tor/ticket/8776 disable] those
 rulesets that cause problematic MCB situations.

 For power users this isn't a problem, because they can live with broken
 CSS or manually allow mixed content.  But for most of our users this is
 catastrophic.

 So we will ship a patch which temporarily disables the MCB about:config
 setting if your Mozilla version is 23, but which pops a NotificationBox
 offering more information and letting you turn it back on if you'd like
 to.

--

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9196#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs