[tor-bugs] #18944 [Applications/Tor Browser]: Remove block-malicious-sites-checkbox on TLS error page

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon May 2 11:09:13 UTC 2016


#18944: Remove block-malicious-sites-checkbox on TLS error page
--------------------------------------------+--------------------------
 Reporter:  gk                              |          Owner:  tbb-team
     Type:  defect                          |         Status:  new
 Priority:  Medium                          |      Milestone:
Component:  Applications/Tor Browser        |        Version:
 Severity:  Normal                          |     Resolution:
 Keywords:  ff45-esr, TorBrowserTeam201605  |  Actual Points:
Parent ID:                                  |         Points:
 Reviewer:                                  |        Sponsor:
--------------------------------------------+--------------------------

Comment (by gk):

 The first thing is We are not in the business of identifying and blocking
 malicious sites. We actually disabled that feature. Second, I see no
 reason why Mozilla should gather data related to a Tor Browser user.
 Third, this message is highly confusing in our context. Say, an exit node
 is MITMing a user. Why should the user report that to Mozilla in order to
 identify and block malicious sites? What is Mozilla supposed to do with
 that information?

 We can think about ways to deal with MITM attacks in Tor Browser but that
 would be another ticket and would need at least a repurposed checkbox.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18944#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list