[tor-bugs] #12684 [Torbutton]: Make "Not Now" the default button for TorBrowser's canvas permission dialogue

[Tor Bug Tracker & Wiki]

#12684: Make "Not Now" the default button for TorBrowser's canvas permission
dialogue
--------------------------------------------+---------------------
 Reporter:  isis                            |          Owner:
     Type:  defect                          |         Status:  new
 Priority:  major                           |      Milestone:
Component:  Torbutton                       |        Version:
 Keywords:  tbb-usability, tbb-linkability  |  Actual Points:
Parent ID:                                  |         Points:
--------------------------------------------+---------------------
 When TorBrowser's HTML5 canvas permission dialogue pops up from the URL
 bar,

 [[Image(https://i.imgur.com/ZGqzK4Z.png)]]

 I suspect that users have ''no idea'' what any of that text means, and so
 they click the largest, most-visible button available on the dialogue box.
 Right now, that's the "Allow in the Future" button, which allows the site
 to access HTML5 canvases forever (and until #12682 and/or #12683 are
 fixed, there isn't a way to revoke that permission).

 I suggest that we make the largest, most-visible button on this dialogue
 be the one which doesn't allow the site permission to access HTML5
 canvases, i.e. the "Not Now" button, since a site which is trying to do
 this is overwhelmingly likely to be sourcing some evil ad company's
 scripts which try to track users. It's not fair to make normal users
 understand how this works, so let's use people's desires to make popups go
 away ASAP to their own advantage for their privacy, without making them
 think too hard about it.

 For background info, see [https://lists.torproject.org/pipermail/tor-
 talk/2014-July/033969.html this thread on the tor-talk mailing list].

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12684>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online