[tor-project] Tor Browser Team Meeting Notes, 09 March 2020

Matthew Finkel sysrqb at torproject.org
Tue Mar 10 12:40:23 UTC 2020

Hello everyone,

We held our weekly meeting yesterday. The meeting log is available at

During this meeting we had a few discussion items, but in summary:

1) Tor Browser weekly meetings will now take place at 18:00 UTC in
#tor-meeting2 beginning next week.

2) We tried releasing the Alpha series every two weeks, but it was too
much of a burden on the team. As a result, we're planning on releasing
Alpha updates on the same cycle as Stable for the next few months.

3) The Tor Browser team will meet at a new time beginning next Monday.
The meeting will be held in #tor-meeting2, as we do currently, but we
will meet at 18:00 UTC.

4) During the Sponsor 27 meeting today, we will discuss ticket #13410
and how we should proceed with regards to S.O.O.C. [SOOC].

[SOOC] https://github.com/alecmuffett/onion-dv-certificate-proposal/blob/master/text/draft-muffett-same-origin-onion-certificates.txt

Team progress and discussion notes
    - RLBox ticket review
    - Android development
    - Release schedule
    - Team meeting time
    - Retrospective


    Last week:

    - SOOC review and brain dump for #13410

    - doesn't actually seem that bad, I think I can get this prototyped relatively easily

    - seems like the bulk of the remaining work with SOOC is political w/ regards to finalizing the spec, uplifting to Firefox, etc

    - team reviews

    - began release note reviews (#33534)

    - 9.5a7 build

    This week:

    - finish release note reviews (#33534)

    - implement SOOC for #13410?


    - review #32379


    Last week:

    - design doc update (#25021)

    - renewal of authenticode signing cert (we'll see how long that takes)

    This week:

    - more design doc update (#25021)

    - maybe work on https://bugzilla.mozilla.org/show_bug.cgi?id=1612035

   Last Week:
   -  #33557: Update Android Toolchain for Fenix (in review)
   -  #33556: TBB for android-components. This went well. I need to figure out some issues surrounding the local maven repo
   -  #33184: Support for Fenix - have tbb build working with network enabled. Needs some work in local maven repo (same as #33556)
   - Opened various fenix related issues for tracking.
   This Week
   - I mostly worked on fenix last week. I’ll be focusing more on android tor related work this coming week.
   - #28765: LibEvent: make small change to handle all platforms
   - Fenix work: resolve local maven repo issues to get fenix and android-components projects building with cached artifacts. This does not yet involve integration with tor related projects.
   - #33565/#33564 - get lzma and zstd working with latest Android NDK. Starting with these because I expect they will be easiest to setup to verify how to use new toolchain.

mcs and brade:
    Last week:
        - Reviewed latest #32645 patch (Update URL bar onion indicators).
        - Started to review #28005 (Officially support onions in HTTPS-Everywhere).
        - Finished and posted patches for #19251 (onion services error page).
        - Posted a patch for #33482 (Update about:tor donate string).
        - Helped with #33514 (non-en-US Tor Browser 9.5a6 won't start up).
        - Revisited #32418 (on every start TB complains that it can't update).
        - Completed self, peer, and team lead feedback for TPI Feedback Cycle 2020-1.
    This week/upcoming:
        - Reviews, reviews, reviews:
            - #21952 (Onion-location).
            - #28005 (Officially support onions in HTTPS-Everywhere).
            - #33402 (Set app.update.url for nightly builds).
            - #33403 (Add nightly mar key to tor-browser).
        - Follow up on any remaining issues for #19251 (onion services error page).

    Last week:
        - Released 9.5a6
        - Began roadmapping Tor Browser migration
        - Release prep for 9.5a7
        - More progress on Apple notarization
        - Tried to avoid COVID-19
        - Release prep for 9.0.6 and 9.5a8
        - OTF Tor Browser proposal
    This week:
        - Trying to avoid COVID-19
        - Release 9.5a7
        - Release 9.0.6 and 9.5a8
        - Reviews

    Last week:
        - Made patch for #33535 (Patch openssl to use SOURCE_DATE_EPOCH for copyright year)
        - Some reviews
        - Looked at bit at quilt/guilt to think about some proposal for handling tor-browser patches
        - Looked at blog comments
    This week:
        - Help with building/publishing new releases
        - Submit openssl patch for #33535 upstream
        - Work on testsuite setup
        - Work on setup of automatic rebasing of tor-browser patches on mozilla-central
        - Waiting for someone to review/merge #33402 and #33403 to check if nightly updates are working

    Last week:
        - OTF Browser proposal revisions
        - Start of month roadmap updates
        - February team report
    This week:
        - OTF proposal final revisions
        - Revisit gitlab for Browser team projects
        - Trac triage
        - Helping out with GSoC student queries
        - Schedule team retrospective

    Last week:
        - Finished #33533 (Rebase Tor Browser esr68 patches on top of mozilla-central)
        - Revised #21952 (Onion-Location) to support meta tags.
        - Wrote feedback
    This week:
        - Finish/send feedback (unfortunately it took more time than what I expected).
        - Reviews (#33482: Update about:tor donate string, #19251: TorBrowser might want to have an error page specific to when .onion links fail)
        - Investigate #33342 (Disconnect search addon causes error at startup)
        - Update #28005 (Officially support onions in HTTPS-Everywhere) to use securedrop testing update channel.
        - Test changes from legind in https-everywhere extension for #28005 ("get_simple_rules_ending_with" message).

Jeremy Rand:
    Last week:
        - Filed #33568.
        - Waited for more Namecoin feedback on tor-talk.
        - Hacked around with #32355 some more.
    This week:
        - Await more Namecoin feedback on tor-talk (hopefully it attracts some attention).
        - Hack on #32355 more.

Have a good week and happy hacking.

- Matt

More information about the tor-project mailing list