Re: [tor-bugs] #25559 [Applications/Tor Browser]: Miscellaneous security- and privacy-related prefs for Tor Browser

[Tor Bug Tracker & Wiki]

#25559: Miscellaneous security- and privacy-related prefs for Tor Browser
--+--
 Reporter:  arthuredelstein   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-security, ff60-esr|  Actual Points:
Parent ID:  #20843| Points:
 Reviewer:|Sponsor:
--+--
Changes (by traumschule):

 * parent:   => #20843


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25559 [Applications/Tor Browser]: Miscellaneous security- and privacy-related prefs for Tor Browser

[Tor Bug Tracker & Wiki]

#25559: Miscellaneous security- and privacy-related prefs for Tor Browser
--+--
 Reporter:  arthuredelstein   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-security, ff60-esr|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--
Changes (by fmarier):

 * cc: francois@… (added)


--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #25559 [Applications/Tor Browser]: Miscellaneous security- and privacy-related prefs for Tor Browser

[Tor Bug Tracker & Wiki]

#25559: Miscellaneous security- and privacy-related prefs for Tor Browser
--+--
 Reporter:  arthuredelstein   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal| Resolution:
 Keywords:  tbb-security, ff60-esr|  Actual Points:
Parent ID:| Points:
 Reviewer:|Sponsor:
--+--

Comment (by cypherpunks):

 > - Security.mixed_content.upgrade_display_content
 > - * Upgrades passive mixed content to HTTPS transparently

 That's #25352

 > Both of these mark HTTP connections as insecure. One with a broken lock
 icon, the other with text saying ‘Not Secure’

 That's #25204

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #25559 [Applications/Tor Browser]: Miscellaneous security- and privacy-related prefs for Tor Browser

[Tor Bug Tracker & Wiki]

#25559: Miscellaneous security- and privacy-related prefs for Tor Browser
--+
 Reporter:  arthuredelstein   |  Owner:  tbb-team
 Type:  defect| Status:  new
 Priority:  Medium|  Milestone:
Component:  Applications/Tor Browser  |Version:
 Severity:  Normal|   Keywords:  tbb-security,
  |  ff60-esr
Actual Points:|  Parent ID:
   Points:|   Reviewer:
  Sponsor:|
--+
 JKT has been working on some prefs he suggested we might consider:
 * Security.mixed_content.upgrade_display_content
   * Upgrades passive mixed content to HTTPS transparently
 * Network.ftp.enabled
   * disable FTP
 * security.insecure_connection_icon.enabled and
 security.insecure_connection_icon.pbmode.enabled
 * security.insecure_connection_text.enabled and
 security.insecure_connection_text.pbmode.enabled
   * Both of these mark HTTP connections as insecure. One with a broken
 lock icon, the other with text saying ‘Not Secure’
 * Insecure flash content:
   * security.mixed_content.block_object_subrequest
 * Sensors:
   * device.sensors.*.enabled (motion, proximity, ambientLight and
 orientation) && the Event constructors are now also included in
 device.sensors.enabled
   * `device.sensors.enabled` set to False in RF
 (https://bugzilla.mozilla.org/show_bug.cgi?id=1369319)
 * dom.registerProtocolHandler.insecure.enabled
 * browser.cache.offline.insecure.enable
 * dom.registerContentHandler.enabled

 Others being pondered:
 * Http-disabled
   * I believe this is to block all HTTP connections.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs