[tor-bugs] #25658 [Applications/Tor Browser]: Activity 2.1: Improve user understanding and user control by clarifying Tor Browser's security features

[Tor Bug Tracker & Wiki]

#25658: Activity 2.1: Improve user understanding and user control by clarifying Tor
Browser's security features
-------------------------------------------+---------------------------
 Reporter:  isabela                        |          Owner:  antonela
     Type:  project                        |         Status:  assigned
 Priority:  High                           |      Milestone:
Component:  Applications/Tor Browser       |        Version:
 Severity:  Normal                         |     Resolution:
 Keywords:  ux-team, TorBrowserTeam201810  |  Actual Points:
Parent ID:                                 |         Points:
 Reviewer:                                 |        Sponsor:  Sponsor17
-------------------------------------------+---------------------------

Comment (by arthuredelstein):

 Replying to [comment:41 gk]:

 > I don't understand that. That dialog is only talking about *where* our
 so-called protections are applied (on all sites/only on unsecure
 sites/never), not *which* kind of protections. And we have two sets of
 protections ("safest" and "safer" however we want to structure the
 latter). Thus, this does not map to an on/off option: It does not say
 which protections apply to all sites ("safer" or "safest") and it does not
 say which protections apply to only unsecure ones. The dialog is only
 talking about "Security Protection" indicating the same group of
 restrictions applies to all three options given (in the first case to all
 sites, in the second one to unsecure ones and in the third case to none)

 What I'm saying is, if we change the "Safer" (Medium) level to Design (2),
 then we have the same 3 levels that are in Antonela's dialog:

  * "All"
  * "Only in 'insecure' sites"
  * "None"

 The "All" and "None" levels are identical to "Standard" and "Safest" in
 our existing 3-level security slider. So that dialog would *replace* the
 security slider, not supplement it.

 Replying to [comment:42 gk]:
 > As a more generic comment: it seems those new proposals that showed up
 in the previous comments are concerned with a different bug (maybe
 #21034?). This bug is about implementing the proposal the description of
 this ticket linked to. In particular, it is concerned with the
 *clarification* and simplification of what we currently *have* not with a
 next step of how we could redesign particular slider levels or security
 protections we provide. While this is important it seems it requires more
 thinking and some data helping us decide what to do.

 It seemed to me this was a good time to discuss the issue because the user
 interface design is closely connected to the behavior of the global and
 per-site safety levels. If we redesign the behavior of the security levels
 after a UI redesign, then it will mean we have to redesign the UI yet once
 more.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25658#comment:43>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online