[tor-commits] [tor-browser-spec/master] Add design outline.

[mikeperry at torproject.org]

commit fcd5119235c3b3711fb100e3c5ef6eee4fa0cfdc
Author: Mike Perry <mikeperry-git at fscked.org>
Date:   Fri Sep 16 00:51:45 2011 -0700

    Add design outline.
---
 docs/design/outline.txt |   52 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/docs/design/outline.txt b/docs/design/outline.txt
new file mode 100644
index 0000000..f7aa5ec
--- /dev/null
+++ b/docs/design/outline.txt
@@ -0,0 +1,52 @@
+- Threat model: [Mostly Torbutton]
+  - [Remove the security requirements section]
+
+- Design overview and philosophy
+  - Security requirements [Torbutton]
+    + local leaks?
+    - state issues
+  - Privacy Requirements [Mostly blog post]
+    - Make local privacy optional
+    - Avoid Cross-Domain Linkability
+      - Indentifiers  
+      - Fingerprinting
+    - 100% self-contained
+      - Does not share state with other modes/browsers
+      - Easy to remove + wipe with external tools
+    - No filters
+
+- Implementation
+  - Section Template
+    - Sub Section
+      - "Design Goal":
+      - "Implementation Status"
+  - Local Privacy Optional
+  - Linkability
+    - Stored State
+      - Cookies
+      - Cache
+      - DOM Storage
+      - HTTP Auth
+      - SSL state
+    - Plugins
+    - Fingerprinting
+  - Patches
+
+- Packaging
+  - Build Process Security
+  - External Addons
+    - Included
+      - HTTPS-E
+      - NoScript
+      - Torbutton
+    - Deliberately excluded
+      - Request Policy, AdblockPlus, etc
+    - Desired
+      - Perspectives/Convergence/etc
+  - Pref Changes
+    - Caused by Torbutton
+    - Set manually in profile
+  - Update security
+    - Thandy
+
+