[tbb-bugs] #21034 [Applications/Tor Browser]: Per site security settings?

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Jul 30 05:40:08 UTC 2017


#21034: Per site security settings?
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:  #20843                    |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by arthuredelstein):

 Replying to [comment:22 tom]:
 > I haven't seen any comment about setting persistence, unless I've missed
 it.
 >
 > If you set custom settings for a domain, to persist those settings we'll
 have to record that you visited that domain, persist that to disk, and
 keep it there forever essentially. That's pretty horrible from a privacy
 perspective.

 You're right -- in terms of disk hygiene, that is very undesirable.

 > The alternative is just as bad from the user experience side. Every time
 you open tor Browser, you're going to have to reset your slider settings
 as you visit each of your frequently visited sites.

 Unfortunately, the current deployed UX is already akin to that, but worse.
 Namely, that users on Medium or High security have to whitelist multiple
 scripts or video/audio every time they visit a favorite site. It's more
 complex than a per-site slider.

 But lately I'm inclined to think that #22981, #22982, and #22985 would
 largely mitigate the problems this ticket was intended to address.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21034#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list