[tor-bugs] #2166 [EFF-HTTPS Everywhere]: Provide checkbox "Break sites to provide more security (where possible)"

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon Nov 8 21:42:55 UTC 2010


#2166: Provide checkbox "Break sites to provide more security (where possible)"
----------------------------------+-----------------------------------------
 Reporter:  mikeperry             |       Owner:  pde     
     Type:  enhancement           |      Status:  accepted
 Priority:  normal                |   Milestone:          
Component:  EFF-HTTPS Everywhere  |     Version:          
 Keywords:                        |      Parent:          
----------------------------------+-----------------------------------------

Comment(by pde):

 Currently, the instinctive conclusion I have about this is that it's okay
 to have the Facebook rule on by default, because the breakage is (1)
 fairly obvious and (2) arguably not a core piece of functionality for many
 users.

 But I reached the opposite conclusion about Amazon, because the breakage
 there is subtle but widespread.  Does it really make sense to have a
 checkbox that toggles these cases together?

 Perhaps a three state toggle:

 Break sites to provide more security (where possible):

 1. Always
 2. When it's probably worth it [default]
 3. As rarely as possible

 Amazon is 1, Facebook is 2.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2166#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list