[tor-bugs] #8312 [Firefox Patch Issues]: Remove "This Plugin is Disabled" click-through

[Tor Bug Tracker & Wiki]

#8312: Remove "This Plugin is Disabled" click-through
--------------------------------------------------+-------------------------
 Reporter:  proper                                |          Owner:  mikeperry   
     Type:  defect                                |         Status:  needs_review
 Priority:  critical                              |      Milestone:              
Component:  Firefox Patch Issues                  |        Version:              
 Keywords:  tbb-usability, tbb-rebase-regression  |         Parent:              
   Points:                                        |   Actualpoints:              
--------------------------------------------------+-------------------------

Comment(by mikeperry):

 Replying to [comment:9 proper]:
 > Replying to [comment:8 mikeperry]:
 > > Our choices here are "Remove the 'Click to manage plugins' link", or
 "Remove the barrier entirely".
 >
 > What are the privacy/security/usability consequences of "Remove the
 barrier entirely"?
 >
 > Let's suppose the user got on youtube.com and flash is still disabled by
 Tor Button (by default). What would happen once the user clicks on the
 first video?

 I just tested this as a Firefox patch.

 >  * case a: html5 / flash video

 The video displays as a black box while the youtube JS loads, probes for
 flash, detects it's missing, and then loads the HTML5 player, which
 NoScript then blocks. This can take several seconds.

 >  * case b: flash-only video

 Youtube tells you that the video requires Adobe flash, and gives you a
 download link.

 It's my opinion that this behavior is better overall. I also created #8386
 to remove the NoScript HTML5 video barrier. I tested disabling the
 NoScript barrier, and I think it's a substantial enough improvement that
 we should just go ahead and remove it by default.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8312#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online