[tor-bugs] #25197 [Applications/Tor Browser]: Design document isn't precise about "Security" and "Privacy".

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Feb 9 23:42:47 UTC 2018


#25197: Design document isn't precise about "Security" and "Privacy".
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-spec                  |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by arthuredelstein):

 Code security or implementation security are more precise, but I feel they
 have the drawback that they may not mean much to users who are not
 programmers themselves.

 Right now the Security Slider uses the terms "Standard", "Safer",
 "Safest". So we could call it the Safety Slider instead. (It's really a
 Safety-Usability tradeoff slider.) But again, Safety is not entirely
 distinct from Privacy.

 It might be good on the Security Slider itself, to say something like "All
 Privacy Protections are active at every level."

 Interestingly, I just noticed it says on the [https://tb-
 manual.torproject.org/en-US/security-slider.html Security Slider page] in
 the Tor Browser manual:

 > Tor Browser includes a “Security Slider” that lets you increase your
 security by disabling certain web features that can be used to attack your
 security and anonymity.

 Mentioning anonymity here seems to imply that dialing privacy protections
 is a purpose of the Slider, which is true in a technical sense but not our
 intention.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25197#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list