[tor-bugs] #9387 [Tor Launcher]: Tor Launcher/Torbutton should provide a "Security Slider"

[Tor Bug Tracker & Wiki]

#9387: Tor Launcher/Torbutton should provide a "Security Slider"
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  gk
  mikeperry              |     Status:  needs_information
         Type:           |  Milestone:
  enhancement            |    Version:
     Priority:  major    |   Keywords:  TorBrowserTeam201410D, tbb-
    Component:  Tor      |  security, tbb-usability, tbb-linkability,
  Launcher               |  tbb-3.0, extdev-interview, tbb-isec-report,
   Resolution:           |  MikePerry2010R
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------
Changes (by gk):

 * keywords:
     TorBrowserTeam201410D, tbb-security, tbb-usability, tbb-linkability,
     tbb-3.0, extdev-interview, tbb-isec-report
     =>
     TorBrowserTeam201410D, tbb-security, tbb-usability, tbb-linkability,
     tbb-3.0, extdev-interview, tbb-isec-report, MikePerry2010R
 * status:  assigned => needs_information


Comment:

 Replying to [comment:44 mikeperry]:
 > In terms of UI, we want this to appear in the Torbutton "Security
 Preferences" pane, but also possibly in the initial Tor Launcher startup
 dialog. Perhaps it should be a XUL binding of the same XML for each place?

 I am not convinced yet that we want the UI in the (initial) startup
 dialog, too given that we already have three dialogs and this is already
 confusing to users. I have therefore put the slider into the Torbutton
 preferences pane. I renamed it slightly to make the distinction between
 the now different types of settings on that pane more clear (we have now
 privacy and security (in a narrower sense) related settings there).

 > Also, we need some logic that causes this UI to grey out and select a
 "Custom Values" radiobutton if the user changes any of these prefs from
 their specified values manually.

 Yes, I think a custom values checkbox is good. I already added one (which
 is hidden by default as the slider is active) but am still thinking about
 its exact behavior. E.g. do we already have custom settings if the user
 changes a slider-related preference belonging to a security level which is
 currently *not* chosen? I am a bit torn here and am not sure what users
 are expecting.

 That said the slider should be working with the following pieces still
 missing:

 -functioning custom checkbox
 -tooltips/help buttons explaining the security levels
 -preferences for disabling SVG and MathML (#12827 and #13548)

 I have not checked yet how hard it is to whip up preferences for #12827
 and #13548. Anyway, the code is in my public Torbutton repo in
 bug_9387_test_01. Feedback is much appreciated.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9387#comment:52>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online