[tor-bugs] #9196 [EFF-HTTPS Everywhere]: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice & control)

[Tor Bug Tracker & Wiki]

#9196: Postpone Firefox mixed content blocking from FF 23 -> 24 (with user notice
& control)
----------------------------------+-----------------------------------------
 Reporter:  pde                   |          Owner:  lisacyao   
     Type:  defect                |         Status:  new        
 Priority:  blocker               |      Milestone:  HTTPS-E 3.3
Component:  EFF-HTTPS Everywhere  |        Version:             
 Keywords:                        |         Parent:             
   Points:                        |   Actualpoints:             
----------------------------------+-----------------------------------------
Description changed by pde:

Old description:

> Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be
> ready for the other when Firefox 23 ships.  On the Mozilla side, we need
> a fix for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing
> too early in the request pipeline], and on the HTTPS Everywhere side we
> need to correctly [https://trac.torproject.org/projects/tor/ticket/8774
> lable] and [https://trac.torproject.org/projects/tor/ticket/8776 disable]
> those rulesets.
>
> For power users this isn't a problem, because they can live with broken
> CSS or manually allow mixed content.  But for most of our users this is
> catastrophic.
>
> So we will ship a patch which temporarily disables the MCB about:config
> setting if your Mozilla version is 23, but which pops a NotificationBox
> offering more information and letting you turn it back on if you'd like
> to.

New description:

 Neither Firefox's Mixed Content Blocker nor HTTPS Everywhere will be ready
 for the other when Firefox 23 ships.  On the Mozilla side, we need a fix
 for [https://bugzilla.mozilla.org/show_bug.cgi?id=878890 MCB firing too
 early in the request pipeline], and on the HTTPS Everywhere side we need
 to correctly [https://trac.torproject.org/projects/tor/ticket/8774 label]
 and [https://trac.torproject.org/projects/tor/ticket/8776 disable] those
 rulesets.

 For power users this isn't a problem, because they can live with broken
 CSS or manually allow mixed content.  But for most of our users this is
 catastrophic.

 So we will ship a patch which temporarily disables the MCB about:config
 setting if your Mozilla version is 23, but which pops a NotificationBox
 offering more information and letting you turn it back on if you'd like
 to.

--

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9196#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online