[tor-bugs] #25658 [Applications/Tor Browser]: Activity 2.1: Improve user understanding and user control by clarifying Tor Browser's security features

[Tor Bug Tracker & Wiki]

#25658: Activity 2.1: Improve user understanding and user control by clarifying Tor
Browser's security features
-------------------------------------------------+-------------------------
 Reporter:  isabela                              |          Owner:
                                                 |  antonela
     Type:  project                              |         Status:
                                                 |  needs_review
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  ux-team, GeorgKoppen201812,          |  Actual Points:
  TorBrowserTeam201903R, tbb-8.5                 |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
                                                 |  Sponsor17
-------------------------------------------------+-------------------------

Comment (by mcs):

 This is an impressive piece of work. Kathy and I finished reviewing the
 tor-browser changes as well as the overall behavior. We are still working
 on our review of the torbutton changes but hope to post our comments later
 today. Here are our comments on behavior (most of these are for Antonela
 to look at):
 1. It would be nice to have a dynamic tooltip for the toolbar item so that
 the active level is visible, e.g., `Security Level: Safer`
 2. It would be nice to eliminate "slider" everywhere, including from the
 `Learn more` link. That will require some coordination with the
 maintainers of tb-manual.torproject.org. Maybe use https://tb-
 manual.torproject.org/.../security-settings.html
 3. The Marvel app design uses the term `Default` instead of `Standard`. Am
 I looking at the wrong design?
 4. The Marvel app design has an disclosure arrow (`>`) in the panel for
 "Advanced Security Settings". Is that important to include in the
 implementation?
 5. If custom mode is triggered, it is a little confusing that there is no
 text in about:preferences to encourage the user to switch back to one of
 the default levels (new users may even think custom is a good thing).
 Also, there is nothing in about:preferences that associates the `Restore
 Defaults` button with fixing the "custom problem." Finally, we might want
 to hide the `Restore Defaults` button when it is not applicable instead of
 disabling it (I think users will wonder why it is disabled). These issues
 might be worth looking at in future iteration.
 6. On macOS at least, the toolbar layout does not match the proposal. With
 a clean profile, the Torbutton icon is on the left side of the toolbar
 instead of the right side and the NoScript and HTTPS-E icons are present.
 7. Related to 6., after upgrading from an 8.5a8 profile, there is one
 additional problem: the security settings icon is missing from the
 toolbar.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/25658#comment:86>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online