[tbb-dev] TBB vs mandatory extension signing

[anonym]

Georg Koppen:
> anonym:
>> Georg Koppen:
>>> anonym:
>>>> Can this list of exceptions be moved to an external file that we in Tails can modify instead? I think I have exhausted all options we have on our side. [2]
>>>
>>> Hm. I have not thought about having a different method for setting up a
>>> whitelist, so, maybe?
>>
>> "Maybe" as in "patches welcome"? :P Or is there something you find problematic with this whole idea?
> 
> I am not so happy with the external file idea. Maybe having a preference
> would be enough? In general, I like to avoid complexity in this
> particular area but if there is no other way to keep Tails working I
> think we would take a patch.

A pref containing the white-list is even better!

>>> Regarding your [2]: the binary files are just
>>> optimizations. You can delete the respective file(s) and the
>>> uncompressed one(s) will be used. That should have a tiny performance
>>> impact but that might be negligible in your case.
>>
>> What do you mean with "uncompressed one(s)"? In my attempt of [2] I removed the affected .jsm files inside the omni.ja archives, hoping that the pure .js ones would be used (with a negligible performance hit), but when I tried starting Tor Browser I got tons of errors logged to stderr, no add-ons were loaded, abd the add-on manager only showed the "Get add-ons" tab. I might have done something wrong, so I'll retry once I've gotten your clarification.
>>
>> Note that in Tails the Tor Browser directory is not writeable by the user running Tor Browser (only the profile directory is) which might influence this e.g. if Tor Browser would like to write uncompressed .jsm files into the Tor Browser directory. 
> 
> That's what I meant. I've been working with this method for a while now
> when I need to modify js stuff related to the Firefox front-end side as
> this is the fasted way to test changes. I had no issues so far. Note
> that with 7.0a3 there should be no compressed JS code modules etc. in
> omni.ja files anymore. See:
> https://trac.torproject.org/projects/tor/ticket/21960 and the linked
> Mozilla bug for further details. We are currently doing the hopefully
> final -build5 and the 7.0a3 we give out should have it.

Good! That means if we have to patch the omni.ja files it will at least be a bit simpler.

Cheers!