[tor-bugs] #25658 [Applications/Tor Browser]: Activity 2.1: Improve user understanding and user control by clarifying Tor Browser's security features

[Tor Bug Tracker & Wiki]

#25658: Activity 2.1: Improve user understanding and user control by clarifying Tor
Browser's security features
-------------------------------------------+---------------------------
 Reporter:  isabela                        |          Owner:  antonela
     Type:  project                        |         Status:  assigned
 Priority:  High                           |      Milestone:
Component:  Applications/Tor Browser       |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  ux-team, TorBrowserTeam201810  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:  Sponsor17
-------------------------------------------+---------------------------

Comment (by antonela):

 Hi geko, thanks for the heads-up; already read the diff. Seems like you
 have a strong opinion for keeping the slider.

 Let's do it again:

 **2.1.1 Removing HTTPS Everywhere and NoScript from the Toolbar**

 OK

 **2.1.2 Showing Security Slider State**

 We tried this before and this is the latest prototype I have: ​

 https://marvelapp.com/383eaa9/screen/44007368

 Should we iterate over it again? Are we happy with the icon? Do we want a
 different icon?

 >
 >To mitigate that problem we could at least warn users about the possible
 danger and provide the option to acquire a New Identity right after
 changing the security slider level.

 Suggest a New Identity after the global setting change, seems smart. We
 can do that right after the user change about:preferences#security. A
 message that says "You may need a New Identity to apply changes safely.
 Your tabs will reload, and some information could be missed" will help.

 >
 >We'll add a security settings button to the toolbar which shows the
 current slider state but, once clicked on, opens an about:preferences
 panel in a new tab which contains the security slider.

 Something like this?
 [[Image(https://trac.torproject.org/projects/tor/raw-
 attachment/ticket/25658/25658-preferences.png, 700px)]]

 **2.1.3 Reorganizing the Toolbar**

 OK

 ** 2.2 Dealing with Per-Site Security Settings**

 > One way to do that would be to use the Permissions section which opens
 after clicking on the "i" icon in the URL bar.

 Ok. It should look similar to

 [[Image(https://trac.torproject.org/projects/tor/raw-
 attachment/ticket/25658/25658%20-%207.png, 700px)]]

 >
 > We should refrain from exposing icons for every single "active content"
 in the URL bar, though. Rather, besides the button for temporarily
 allowing JavaScript we would only add one additional, which is responsible
 for manipulating and showing the state of "active content" (like WebGL,
 SVG, fonts etc.).

 Where do you think it should have place? At the Control Center doorhanger?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25658#comment:35>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online