[tor-bugs] #7522 [BridgeDB]: Design a user interface for redeeming tokens

[Tor Bug Tracker & Wiki]

#7522: Design a user interface for redeeming tokens
----------------------+-----------------------------------------------------
 Reporter:  aagbsn    |          Owner:       
     Type:  task      |         Status:  new  
 Priority:  normal    |      Milestone:       
Component:  BridgeDB  |        Version:       
 Keywords:            |         Parent:  #7520
   Points:            |   Actualpoints:       
----------------------+-----------------------------------------------------
 Should this interface be web based? Email based with gpg support? Both?

 Should a token be redeemed for an account, or be used each time to request
 a bridge?

 If a token is exchanged for an account, BridgeDB would need to store
 account credentials provided by a user. That might be more convenient for
 a user to remember, but might lead to problems such as:

 account names can be probed (i.e. does an account by a certain name
 already exist?)
 users might re-use nyms, potentially a liability.

 On the other hand, an account might be identified by an email address,
 which could be used to periodically send new bridges or invites. We want
 to add email subscription support to BridgeDB (#1610), and perhaps these
 features should overlap.

 Perhaps we could support both modes, where a valid token can be used to
 request bridges and add/remove email addresses. If a user chooses to add
 an email address, a suitable warning would be displayed to advise the user
 that the email address will be stored on the system.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7522>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online