#25658: Activity 2.1: Improve user understanding and user control by clarifying Tor Browser's security features -------------------------------------------+--------------------------- Reporter: isabela | Owner: antonela Type: project | Status: assigned Priority: High | Milestone: Component: Applications/Tor Browser | Version: Severity: Normal | Resolution: Keywords: ux-team, TorBrowserTeam201810 | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: Sponsor17 -------------------------------------------+---------------------------
Comment (by antonela): Hi geko, thanks for the heads-up; already read the diff. Seems like you have a strong opinion for keeping the slider. Let's do it again: **2.1.1 Removing HTTPS Everywhere and NoScript from the Toolbar** OK **2.1.2 Showing Security Slider State** We tried this before and this is the latest prototype I have: https://marvelapp.com/383eaa9/screen/44007368 Should we iterate over it again? Are we happy with the icon? Do we want a different icon? > >To mitigate that problem we could at least warn users about the possible danger and provide the option to acquire a New Identity right after changing the security slider level. Suggest a New Identity after the global setting change, seems smart. We can do that right after the user change about:preferences#security. A message that says "You may need a New Identity to apply changes safely. Your tabs will reload, and some information could be missed" will help. > >We'll add a security settings button to the toolbar which shows the current slider state but, once clicked on, opens an about:preferences panel in a new tab which contains the security slider. Something like this? [[Image(https://trac.torproject.org/projects/tor/raw- attachment/ticket/25658/25658-preferences.png, 700px)]] **2.1.3 Reorganizing the Toolbar** OK ** 2.2 Dealing with Per-Site Security Settings** > One way to do that would be to use the Permissions section which opens after clicking on the "i" icon in the URL bar. Ok. It should look similar to [[Image(https://trac.torproject.org/projects/tor/raw- attachment/ticket/25658/25658%20-%207.png, 700px)]] > > We should refrain from exposing icons for every single "active content" in the URL bar, though. Rather, besides the button for temporarily allowing JavaScript we would only add one additional, which is responsible for manipulating and showing the state of "active content" (like WebGL, SVG, fonts etc.). Where do you think it should have place? At the Control Center doorhanger? -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25658#comment:35> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs