[tor-talk] Flashproxy questions. (Badge config, user interaction)

[Sebastian G. <bastik.tor>]

David Fifield:
>> My question was how an admin can achieve to have be opt-in? (Now I
>> understand that doesn't seem possible.)
>>
>> Couldn't you have
>> "crypto.stanford.edu/flashproxy/embed_opt_in.html"
>> and
>> "crypto.stanford.edu/flashproxy/embed_opt_out.html"
>> to make it possible to choose between them?
> 
> This is what I am thinking. Something like
> 
> <iframe src="//crypto.stanford.edu/flashproxy/embed.html?cookierequired=true">
> <iframe src="//crypto.stanford.edu/flashproxy/embed.html?cookierequired=false">
> 
> The query parameters are easier to handle from a code point of view. The
> way it works now is cookierequired=false. With cookierequired=true,
> clicking on the badge will bring up a yes/no dialog, and set a cookie if
> yes. I think it's reasonable for the cookie to grant permission across
> all web sites.
> 

Your approach is better than mine, because it requires just one html
document (easier to handle code) and the opt-in works globally. A user
clicks the dialog and it just works, for multiple websites.

Let's hope for wide distribution.

Sebastian (bastik_tor)