[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #6096 [TorBrowserButton]: Perform TBB version check async on new tab?

#6096: Perform TBB version check async on new tab?
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry
     Type:  enhancement       |         Status:  new      
 Priority:  major             |      Milestone:           
Component:  TorBrowserButton  |        Version:           
 Keywords:                    |         Parent:           
   Points:                    |   Actualpoints:           
------------------------------+---------------------------------------------

Comment(by mikeperry):

 Replying to [comment:5 arma]:
 > Replying to [comment:4 mikeperry]:
 > > We can clearly at least do the check more often, perhaps on every new
 tab. Or do we not like disclosing that new tabs are being opened to the
 exit node/network?
 >
 > By 'do the check' do you mean have an interaction with
 check.torproject.org every time the user opens a tab? Or do you mean
 "every time the user opens a tab, check if the timer has expired and if so
 do the interaction"?

 The latter, and it would just be the AJAX version check query, not the
 page load.

 > I am increasingly believing that when the user starts tbb, and it's out
 of date, they need to know. So some check at startup, in a way where they
 are notified if the answer is 'out of date', is needed.
 >
 > I wonder if we should open two tabs, one which is a local file:/// that
 says "you're using tbb" or something, and the second of which goes to
 check.tp.o? Then they can start browsing while it does the fetch, if it's
 taking a long time.
 >
 > Or is that too much like your phishing popup worries?

 Yeah, since normal web pages can open new tabs in some cases, this is a
 bad thing to train, I think.

 I think perhaps we just create a XUL popup that looks and claims to be a
 Tor Browser window, but looks nothing like a web page. We'd have to create
 new Torbutton strings and get them translated, but it's probably the best
 option.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6096#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs