Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-11-15 Thread David Hedlund
You an now click on "Votes" and add your vote(s) on 
https://savannah.gnu.org/bugs/index.php?49607




On 2016-09-27 04:51, mdn wrote:

I don't understand what's the problems with cookies options.

To understand my POV I'll explain what's my experience.

I understood the problems with cookies since 2003/2004.
So in that time each time I used a browser I deleted all info in it.
Never had trouble navigating and I didn't refuse any thing (wasn't aware
enough)

In 2007 I began to use the firefox and I used the automated functions to
deleted what I did before manually.
I still accepted everything (still wasn't aware enough)


Now I just accept cookies but only for the website in use (no third
parties) and everything is still deleted.
I don't have trouble with ebay, since ebay save the basket on their
servers same thing with a lot of other services, amazon for example (if
account).

Plus µblock origin, umatrix, https everywhere, and random agent spoofer.
I just have problems with some banks because some of them use 3rd party
cookies and it's obligatory (wtf).

Something that would be useful is a container for cookies (or more).
Each container opened can only have access to it's own container.

In "Nightly" they introduced "containers tabs" it's seems that these
container can do the functions that I have talked about but when I look at
https://wiki.mozilla.org/Security/Contextual_Identity_Project/Containers

The big problem of the actual container is that you can't make your own
personalised containers.

Also one function by default that could be good in icecat is to put the
"Portable document Format (PDF)" in the application menu in the
preferences, under the "always ask" action.

Good night.


Le 24/09/2016 09:04, Narcis Garcia a écrit :

The only fault I see in Cookie Monster is the lack of an "About" option
to see version & license.

Cookie Monster is oriented in the best way I believe: the 3rd party and
the domains&subdomains.
Cookies are not simply cookies: the bad ones are set from different
origins than user has asked to visit.

eBay, Amazon, AliExpress and maybe others should change their security
policies (security for visitor) and allow responsible users to use their
services.


El 24/09/16 a les 01:16, David Hedlund ha escrit:

David, have you tried "Cookie Monster", or any other similar add-on?

This is my conclusion regarding cookie add-ons that I evaluated in
https://directory.fsf.org/wiki/Free_Software_Directory:IceCat_extensions_(proposed)


* I use Self-destructing cookies as recommended in the link mentioned in
the first post of this thread.
* Privacy Badger is useful to reject untrusted cookies, keep in mind
that this add-on still is in alpha stage.
* Cookie Monster (CM) rejects 3rd-party cookies by default so you have
to whitelist a lot of domains using CDN domains with CM. This applies to
all the big sites like eBay, Amazon, and AliExpress. This take to much
work for me as there are no editable whitelist like in Self-destructing
cookies. The developer of CM have a copy of this email though.


--
http://gnuzilla.gnu.org

--
http://gnuzilla.gnu.org




--
http://gnuzilla.gnu.org


--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-10-03 Thread awakeyet
agreed 100%

--
Securely sent with Tutanota. Claim your encrypted mailbox today!
https://tutanota.com

23. Sep 2016 13:51 by d...@runbox.com:


> AFTER fixing the security bugs to make IceCat SAFE TO USE AT ALL.
>
> --
>
> -Dan Q
>
>
> On Fri, 23 Sep 2016 19:37:07 +0200, Narcis Garcia <> informat...@actiu.net> > 
> wrote:
>
>>
>> GNUzilla should assume abandoned responsibility by Mozilla with the users.
>>
> --
> http://gnuzilla.gnu.org--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-10-03 Thread awakeyet
Do you see the agenda here? we are being attacked by shills. this is why there 
is suddenly so much (politics) here. they do not approve of GNU 
icecat. just like ((they) do not approve of GMO labeling, or laws that 
protect the second amendment, or anything that upholds the freedoms of this 
crumbling country. why was a hero like edward snowden hunted like an animal? 
ask yourself who benefits from the failure of GNU icecat. ask yourself why 
system-d was created and forced into ALL linux out of nowhere for no reason, 
just as people switched over to run from windows 10, soylent green edition?

--
Securely sent with Tutanota. Claim your encrypted mailbox today!
https://tutanota.com

23. Sep 2016 13:21 by m...@netris.org:


> "Daniel Quintiliani" <> d...@runbox.com> > writes:
>
>> Why is everyone so opposed to an addon for something that nobody uses?
>> I can't imagine anyone clicking 20 dialog boxes per each loaded banner
>> ad. So opposed to using an addon that they are unwilling to update
>> serious security problems in software?
>>
>> All I know is that all of this politics is aggravating me and I have
>> not used IceCat in months for my own personal safety. I not only have
>> Linux but Windows to worry about so having security is more important
>> than whether something should be farmed out to an already existing
>> addon or included in the browser. IceCat can be a great alternative as
>> it's pro-privacy and anti-DRM. All our arguing has delayed an IceCat
>> release for too long and we will not be taken seriously as a free
>> browser if we keep arguing about cookies until Firefox 60.0 ESR is
>> released.
>
> Except for the part about politics, I fully agree with Daniel.  I care
> about cookies as well, but the built-in "ask me every time" option was
> never satisfactory, because it involves asking the user far too many
> questions.
>
> The only satisfactory solution I've found for cookies involve add-ons.
> I've been using "Cookie Monster", which works well enough that I've not
> tried any others.  GNU IceCat already depends on add-ons for critically
> important functionality (e.g. avoiding non-free Javascript), so why not
> rely on add-ons for cookies?
>
> Regardless of your opinion on that, asking the IceCat maintainer to make
> additional non-trivial changes to upstream Firefox, when he's obviously
> too over-burdened with his existing workload, is counter-productive.
> Perhaps you do not understand how much work would be involved.
>
> David, have you tried "Cookie Monster", or any other similar add-on?
>
>   Mark
>
> --
> http://gnuzilla.gnu.org--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-28 Thread kardan
Hey,

I am on this list because I am sympathetic with IceCat, tried it
several times years ago und found it slim and easy to use.

Since then I mostly migrated from firefox(-esr) to TorBrowser.

Am Fri, 23 Sep 2016 19:37:07 +0200
schrieb Narcis Garcia :

> "something that nobody uses"
> -> Your statistics source?  

I have no statistics, but a (provocative) question: Why should I use
IceCat instead of TorBrowser?

Features like suppressing the HTTP_Referrer header I would not like to
miss. Does IceCat keep up with TorBrowser development to support these
privacy features?

IceCat does not appear in the BrowserPrivacy Scorecard[1]. What would
IceCat's rating be?

Best,
kardan

[1]
https://riseup.net/en/security/network-security/better-web-browsing/browser-score-card

--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-26 Thread mdn
I don't understand what's the problems with cookies options.

To understand my POV I'll explain what's my experience.

I understood the problems with cookies since 2003/2004.
So in that time each time I used a browser I deleted all info in it.
Never had trouble navigating and I didn't refuse any thing (wasn't aware
enough)

In 2007 I began to use the firefox and I used the automated functions to
deleted what I did before manually.
I still accepted everything (still wasn't aware enough)


Now I just accept cookies but only for the website in use (no third
parties) and everything is still deleted.
I don't have trouble with ebay, since ebay save the basket on their
servers same thing with a lot of other services, amazon for example (if
account).

Plus µblock origin, umatrix, https everywhere, and random agent spoofer.
I just have problems with some banks because some of them use 3rd party
cookies and it's obligatory (wtf).

Something that would be useful is a container for cookies (or more).
Each container opened can only have access to it's own container.

In "Nightly" they introduced "containers tabs" it's seems that these
container can do the functions that I have talked about but when I look at
https://wiki.mozilla.org/Security/Contextual_Identity_Project/Containers

The big problem of the actual container is that you can't make your own
personalised containers.

Also one function by default that could be good in icecat is to put the
"Portable document Format (PDF)" in the application menu in the
preferences, under the "always ask" action.

Good night.


Le 24/09/2016 09:04, Narcis Garcia a écrit :
> The only fault I see in Cookie Monster is the lack of an "About" option
> to see version & license.
> 
> Cookie Monster is oriented in the best way I believe: the 3rd party and
> the domains&subdomains.
> Cookies are not simply cookies: the bad ones are set from different
> origins than user has asked to visit.
> 
> eBay, Amazon, AliExpress and maybe others should change their security
> policies (security for visitor) and allow responsible users to use their
> services.
> 
> 
> El 24/09/16 a les 01:16, David Hedlund ha escrit:
>>> David, have you tried "Cookie Monster", or any other similar add-on?
>>
>> This is my conclusion regarding cookie add-ons that I evaluated in
>> https://directory.fsf.org/wiki/Free_Software_Directory:IceCat_extensions_(proposed)
>>
>>
>> * I use Self-destructing cookies as recommended in the link mentioned in
>> the first post of this thread.
>> * Privacy Badger is useful to reject untrusted cookies, keep in mind
>> that this add-on still is in alpha stage.
>> * Cookie Monster (CM) rejects 3rd-party cookies by default so you have
>> to whitelist a lot of domains using CDN domains with CM. This applies to
>> all the big sites like eBay, Amazon, and AliExpress. This take to much
>> work for me as there are no editable whitelist like in Self-destructing
>> cookies. The developer of CM have a copy of this email though.
>>
>>
>> -- 
>> http://gnuzilla.gnu.org
> 
> --
> http://gnuzilla.gnu.org
> 

-- 
Note: veuillez s'il vous plaît utiliser GnuPg pour nos futures conversations
https://emailselfdefense.fsf.org/fr/
Plus d'info ici:
http://www.bibmath.net/crypto/index.php?action=affiche&quoi=moderne/pgp

Message envoyé avec GNU Icedove un fork de Thunderbird
https://directory.fsf.org/wiki/Icedove



signature.asc
Description: OpenPGP digital signature
--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-24 Thread Narcis Garcia
The only fault I see in Cookie Monster is the lack of an "About" option
to see version & license.

Cookie Monster is oriented in the best way I believe: the 3rd party and
the domains&subdomains.
Cookies are not simply cookies: the bad ones are set from different
origins than user has asked to visit.

eBay, Amazon, AliExpress and maybe others should change their security
policies (security for visitor) and allow responsible users to use their
services.


El 24/09/16 a les 01:16, David Hedlund ha escrit:
>> David, have you tried "Cookie Monster", or any other similar add-on?
> 
> This is my conclusion regarding cookie add-ons that I evaluated in
> https://directory.fsf.org/wiki/Free_Software_Directory:IceCat_extensions_(proposed)
> 
> 
> * I use Self-destructing cookies as recommended in the link mentioned in
> the first post of this thread.
> * Privacy Badger is useful to reject untrusted cookies, keep in mind
> that this add-on still is in alpha stage.
> * Cookie Monster (CM) rejects 3rd-party cookies by default so you have
> to whitelist a lot of domains using CDN domains with CM. This applies to
> all the big sites like eBay, Amazon, and AliExpress. This take to much
> work for me as there are no editable whitelist like in Self-destructing
> cookies. The developer of CM have a copy of this email though.
> 
> 
> -- 
> http://gnuzilla.gnu.org

--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread Daniel Quintiliani
How I handle it: Accept cookies, accept third-party cookies, clear cookies when 
you close the browser.

--

-Dan Q

On Sat, 24 Sep 2016 01:22:46 +0200, David Hedlund  wrote:

>  >Cookie Monster (CM) rejects 3rd-party cookies by default so you have 
> to whitelist a lot of domains using CDN domains with CM. This applies to 
> all the big sites like eBay, Amazon, and AliExpress. This take to much 
> work for me as there are no editable whitelist like in Self-destructing 
> cookies. The developer of CM have a copy of this email though.
> 
> I was wrong, there are whitelist for CM but still you need to whitelist 
> a lot of 3rd-party CDN domains.
> 
> --
> http://gnuzilla.gnu.org



--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread David Hedlund
>Cookie Monster (CM) rejects 3rd-party cookies by default so you have 
to whitelist a lot of domains using CDN domains with CM. This applies to 
all the big sites like eBay, Amazon, and AliExpress. This take to much 
work for me as there are no editable whitelist like in Self-destructing 
cookies. The developer of CM have a copy of this email though.


I was wrong, there are whitelist for CM but still you need to whitelist 
a lot of 3rd-party CDN domains.


--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread David Hedlund

> David, have you tried "Cookie Monster", or any other similar add-on?

This is my conclusion regarding cookie add-ons that I evaluated in 
https://directory.fsf.org/wiki/Free_Software_Directory:IceCat_extensions_(proposed)


* I use Self-destructing cookies as recommended in the link mentioned in 
the first post of this thread.
* Privacy Badger is useful to reject untrusted cookies, keep in mind 
that this add-on still is in alpha stage.
* Cookie Monster (CM) rejects 3rd-party cookies by default so you have 
to whitelist a lot of domains using CDN domains with CM. This applies to 
all the big sites like eBay, Amazon, and AliExpress. This take to much 
work for me as there are no editable whitelist like in Self-destructing 
cookies. The developer of CM have a copy of this email though.



--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread Daniel Quintiliani
AFTER fixing the security bugs to make IceCat SAFE TO USE AT ALL.

--

-Dan Q


On Fri, 23 Sep 2016 19:37:07 +0200, Narcis Garcia  wrote:

>
> GNUzilla should assume abandoned responsibility by Mozilla with the users.
> 
--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread Narcis Garcia
"something that nobody uses"
-> Your statistics source?

Mozilla removal of "cookies askings" is inspired on legal obligation for
websites about asking every visitor.
Mozilla shifts its responsibility to websites, and allows websites to
fulfill their way in a more or less suitable interaction with the user.

Near all websites that advertise the cookies question are sending
cookies BEFORE visitor accepts or rejects the question.
Plus: much websites aren't asking visitor; they are informing about
cookies acceptance with your visit.
Plus+: Trackers embedded in websites aren't making any asking.

GNUzilla should assume abandoned responsibility by Mozilla with the users.


On 23/09/16 18:25, Daniel Quintiliani wrote:
> Why is everyone so opposed to an addon for something that nobody uses? I 
> can't imagine anyone clicking 20 dialog boxes per each loaded banner ad. So 
> opposed to using an addon that they are unwilling to update serious security 
> problems in software?
> 
> All I know is that all of this politics is aggravating me and I have not used 
> IceCat in months for my own personal safety. I not only have Linux but 
> Windows to worry about so having security is more important than whether 
> something should be farmed out to an already existing addon or included in 
> the browser. IceCat can be a great alternative as it's pro-privacy and 
> anti-DRM. All our arguing has delayed an IceCat release for too long and we 
> will not be taken seriously as a free browser if we keep arguing about 
> cookies until Firefox 60.0 ESR is released.
> 
> --
> 
> -Dan Q
> 
> On Fri, 23 Sep 2016 03:12:22 +0200, David Hedlund  wrote:
> 
>>  From https://support.mozilla.org/en-US/questions/1118394
>>
>> hi, the ask anytime option for cookies was removed in firefox 44, which 
>> was supposed to happen for a long time (bug 606655).
>>
>> i would recommend the following setup instead: in the custom history 
>> options choose "keep until i close firefox" as a default option & set 
>> exceptions for the few sites where you want stay logged-in across 
>> sessions. this way you'll have less work to do over all and a 
>> privacy-minded setup after all.
>>
>> or as an alternative you could also take a look at an extension like 
>> https://addons.mozilla.org/firefox/addon/self-destructing-cookies/
>>
>>
>> Lots of people complain about this. Consider to keep the code for 
>> cookies "ask me every time" from Firefox 43 for IceCat 45.
>>
>>
>> --
>> http://gnuzilla.gnu.org
> 
> 
> 
> --
> http://gnuzilla.gnu.org
> 

--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread Mark H Weaver
"Daniel Quintiliani"  writes:

> Why is everyone so opposed to an addon for something that nobody uses?
> I can't imagine anyone clicking 20 dialog boxes per each loaded banner
> ad. So opposed to using an addon that they are unwilling to update
> serious security problems in software?
>
> All I know is that all of this politics is aggravating me and I have
> not used IceCat in months for my own personal safety. I not only have
> Linux but Windows to worry about so having security is more important
> than whether something should be farmed out to an already existing
> addon or included in the browser. IceCat can be a great alternative as
> it's pro-privacy and anti-DRM. All our arguing has delayed an IceCat
> release for too long and we will not be taken seriously as a free
> browser if we keep arguing about cookies until Firefox 60.0 ESR is
> released.

Except for the part about politics, I fully agree with Daniel.  I care
about cookies as well, but the built-in "ask me every time" option was
never satisfactory, because it involves asking the user far too many
questions.

The only satisfactory solution I've found for cookies involve add-ons.
I've been using "Cookie Monster", which works well enough that I've not
tried any others.  GNU IceCat already depends on add-ons for critically
important functionality (e.g. avoiding non-free Javascript), so why not
rely on add-ons for cookies?

Regardless of your opinion on that, asking the IceCat maintainer to make
additional non-trivial changes to upstream Firefox, when he's obviously
too over-burdened with his existing workload, is counter-productive.
Perhaps you do not understand how much work would be involved.

David, have you tried "Cookie Monster", or any other similar add-on?

  Mark

--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread Daniel Quintiliani
Why is everyone so opposed to an addon for something that nobody uses? I can't 
imagine anyone clicking 20 dialog boxes per each loaded banner ad. So opposed 
to using an addon that they are unwilling to update serious security problems 
in software?

All I know is that all of this politics is aggravating me and I have not used 
IceCat in months for my own personal safety. I not only have Linux but Windows 
to worry about so having security is more important than whether something 
should be farmed out to an already existing addon or included in the browser. 
IceCat can be a great alternative as it's pro-privacy and anti-DRM. All our 
arguing has delayed an IceCat release for too long and we will not be taken 
seriously as a free browser if we keep arguing about cookies until Firefox 60.0 
ESR is released.

--

-Dan Q

On Fri, 23 Sep 2016 03:12:22 +0200, David Hedlund  wrote:

>  From https://support.mozilla.org/en-US/questions/1118394
> 
> hi, the ask anytime option for cookies was removed in firefox 44, which 
> was supposed to happen for a long time (bug 606655).
> 
> i would recommend the following setup instead: in the custom history 
> options choose "keep until i close firefox" as a default option & set 
> exceptions for the few sites where you want stay logged-in across 
> sessions. this way you'll have less work to do over all and a 
> privacy-minded setup after all.
> 
> or as an alternative you could also take a look at an extension like 
> https://addons.mozilla.org/firefox/addon/self-destructing-cookies/
> 
> 
> Lots of people complain about this. Consider to keep the code for 
> cookies "ask me every time" from Firefox 43 for IceCat 45.
> 
> 
> --
> http://gnuzilla.gnu.org



--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-23 Thread Mart Rootamm
David Hedlund wrote:
> Consider to keep the code for cookies "ask me every time" from Firefox 43
> for IceCat 45.

Concur. This is a must-have feature, and one that should not have been
removed in the first place. If that functionality is kept in IceCat 45,
then there would certainly be more IceCat users.

-M.

2016-09-23 4:12 GMT+03:00 David Hedlund :

> From https://support.mozilla.org/en-US/questions/1118394
>
> hi, the ask anytime option for cookies was removed in firefox 44, which
> was supposed to happen for a long time (bug 606655).
>
> i would recommend the following setup instead: in the custom history
> options choose "keep until i close firefox" as a default option & set
> exceptions for the few sites where you want stay logged-in across sessions.
> this way you'll have less work to do over all and a privacy-minded setup
> after all.
>
> or as an alternative you could also take a look at an extension like
> https://addons.mozilla.org/firefox/addon/self-destructing-cookies/
>
>
> Lots of people complain about this. Consider to keep the code for cookies
> "ask me every time" from Firefox 43 for IceCat 45.
>
>
> --
> http://gnuzilla.gnu.org
>
--
http://gnuzilla.gnu.org


Re: [Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-22 Thread Narcis Garcia
+1


El 23/09/16 a les 03:12, David Hedlund ha escrit:
> From https://support.mozilla.org/en-US/questions/1118394
> 
> hi, the ask anytime option for cookies was removed in firefox 44, which
> was supposed to happen for a long time (bug 606655).
> 
> i would recommend the following setup instead: in the custom history
> options choose "keep until i close firefox" as a default option & set
> exceptions for the few sites where you want stay logged-in across
> sessions. this way you'll have less work to do over all and a
> privacy-minded setup after all.
> 
> or as an alternative you could also take a look at an extension like
> https://addons.mozilla.org/firefox/addon/self-destructing-cookies/
> 
> 
> Lots of people complain about this. Consider to keep the code for
> cookies "ask me every time" from Firefox 43 for IceCat 45.
> 
> 
> -- 
> http://gnuzilla.gnu.org

--
http://gnuzilla.gnu.org


[Bug-gnuzilla] IceCat 45 IMPORTANT consideration: Keep cookie prompt "ask me every time"

2016-09-22 Thread David Hedlund

From https://support.mozilla.org/en-US/questions/1118394

hi, the ask anytime option for cookies was removed in firefox 44, which 
was supposed to happen for a long time (bug 606655).


i would recommend the following setup instead: in the custom history 
options choose "keep until i close firefox" as a default option & set 
exceptions for the few sites where you want stay logged-in across 
sessions. this way you'll have less work to do over all and a 
privacy-minded setup after all.


or as an alternative you could also take a look at an extension like 
https://addons.mozilla.org/firefox/addon/self-destructing-cookies/



Lots of people complain about this. Consider to keep the code for 
cookies "ask me every time" from Firefox 43 for IceCat 45.



--
http://gnuzilla.gnu.org