[tor-bugs] #18944 [Applications/Tor Browser]: Remove block-malicious-sites-checkbox on TLS error page

[Tor Bug Tracker & Wiki]

#18944: Remove block-malicious-sites-checkbox on TLS error page
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  gk
     Type:  defect                               |         Status:  closed
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:  wontfix
 Keywords:  ff45-esr, TorBrowserTeam201605,      |  Actual Points:
  GeorgKoppen201605, tbb-6.0-must                |         Points:
Parent ID:                                       |        Sponsor:
 Reviewer:                                       |
-------------------------------------------------+-------------------------
Changes (by gk):

 * status:  assigned => closed
 * resolution:   => wontfix


Comment:

 Replying to [comment:3 gk]:
 > The first thing is We are not in the business of identifying and
 blocking malicious sites. We actually disabled that feature.

 Looking closer that is not related to the Safebrowsing malware protection
 (which I assumed and which was the reason for filing this ticket). In
 ESR38 this checkbox is already existing although deeper buried and the
 whole thing is working slightly differently. I guess we leave it as-is for
 now then but file a ticket to get Mozilla out of the loop. That might even
 help detecting bad relays.

 > Second, I see no reason why Mozilla should gather data related to a Tor
 Browser user. Third, this message is highly confusing in our context. Say,
 an exit node is MITMing a user. Why should the user report that to Mozilla
 in order to identify and block malicious sites? What is Mozilla supposed
 to do with that information?
 >
 > We can think about ways to deal with MITM attacks in Tor Browser but
 that would be another ticket and would need at least a repurposed
 checkbox.

 This is #19119.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18944#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online