[tor-bugs] #18944 [Applications/Tor Browser]: Remove block-malicious-sites-checkbox on TLS error page
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon May 2 11:09:13 UTC 2016
#18944: Remove block-malicious-sites-checkbox on TLS error page
--------------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Normal | Resolution:
Keywords: ff45-esr, TorBrowserTeam201605 | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------------+--------------------------
Comment (by gk):
The first thing is We are not in the business of identifying and blocking
malicious sites. We actually disabled that feature. Second, I see no
reason why Mozilla should gather data related to a Tor Browser user.
Third, this message is highly confusing in our context. Say, an exit node
is MITMing a user. Why should the user report that to Mozilla in order to
identify and block malicious sites? What is Mozilla supposed to do with
that information?
We can think about ways to deal with MITM attacks in Tor Browser but that
would be another ticket and would need at least a repurposed checkbox.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18944#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list