[tor-bugs] #25658 [Applications/Tor Browser]: Activity 2.1: Improve user understanding and user control by clarifying Tor Browser's security features

[Tor Bug Tracker & Wiki]

#25658: Activity 2.1: Improve user understanding and user control by clarifying Tor
Browser's security features
-------------------------------------------+---------------------------
 Reporter:  isabela                        |          Owner:  antonela
     Type:  project                        |         Status:  assigned
 Priority:  High                           |      Milestone:
Component:  Applications/Tor Browser       |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  ux-team, TorBrowserTeam201810  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:  Sponsor17
-------------------------------------------+---------------------------

Comment (by antonela):

 Replying to gk:

 > Well, New Identity means that tabs won't reload: the browser will close
 and reopen as a blank slate. But, yes, we should provide that option with
 a similar wording.

 I that case "Restart to apply changes" is the safest suggestion we can do.

 > Well, as I said I am not clinging to the slider element, if we think we
 can transport our ideas better with, say, bullets as outlined in your
 prototype that's fine with me. One thing we should think about, though, is
 the amount of space our redesign should occupy. It seems to me the
 (horizontal) slider has some benefits here but I am sure we could come up
 with a similar "small" proposal if bullets are used instead (e.g. by
 collapsing text of security levels not being used currently).

 Cool. I think the radio button options will work better at the preferences
 section. Yes, we can collapse the details in the future.

 > Works for me. We could think about as well showing little icons directly
 in the URL bar but I am not sure how much energy and time we should spend
 on the per-site security settings anyway. My feeling is not so much,
 especially compared to making the overall experience better.[...] Yes,
 that would be one place. But as I said above, maybe URL bar icons would be
 smart as well? Or maybe we should not spend time optimizing for that
 corner case?

 Ok. I made a mockup for it. If we want to have the same userflow the Block
 Content feature have, then we will need an icon for "Javascript" and
 "Active Content." I'm using the permissions icon at the URL bar now to
 show that some permission have been granted. Two icons are not too much.
 Firefox has this scenario when you block the microphone and the camera at
 the same time, for example.

 > We still need to work on informing users that NoScript and
 HTTSEverywhere icons are available to be placed at the Top Nav via
 Menu/Customize. We could include a step/card explaining it at the new
 onboarding.

 Yep. Once the previous items are ready and approved, I'll move to the
 onboarding card.

 > Also, current about:preferences at FF60 doesn't have a [SAVE] button to
 confirm the action. Do you think we need to add an intermediate step for
 users to verify their radio option pick? May we need it for anything else?

 Yes, we need users to confirm the Restart to apply changes.

 > There is actually another item brought up in comment:29 to rename what
 we have to "Feature filter" while we are at it.

 I agree with roger about the behavior of the tool. But, I don't think this
 renaming improves user comprehension on what is happening.

 > One final thought: What do we do in the new design once a user flips a
 preference that is governed by our security controls essentially kicking
 themselves off that security level to something custom? Right now our UI
 gives the hint with the option to restore the default state. It seems to
 me we should keep that in the new UI as well.

 Yes, the next comment includes a 3.X section that contemplates that user
 story. Both, global and per-site settings.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25658#comment:47>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online