Soul Plane wrote:
> I am new to Tails but I thought that the 'New Identity' option in the
> browser generated a truly separate identity. Recently I stumbled on a
> warning here:
> https://tails.boum.org/doc/about/warning/index.en.html#identities
> 
> Is it a bug that new identities aren't truly separate? It sounds like a
> bug.


The warning message that you are referring to dates from before the
addition of the new identity feature in the browser. At that time only
the new identity of Vidalia was available, and it was quite weaker.

I created a ticket to fix that:

https://labs.riseup.net/code/issues/7470

So yes, I think that if you only talk about "identity" as in the
browser, the new identity of the browser is quite much stronger than
what Vidalia only proposes. But as our warning says, if you do more than
web browsing, that "identity" goes beyond that. Then some circuits might
be preserved in Vidalia (for example, long connections to an IRC
channel, etc). So there are probably many ways of doing mistakes here,
and restarting is still the best way to be on the safe side.

> Why not abandon all established circuits and information related to
> the old identity?

First of all, we don't maintain Vidalia (actually nobody does) so we
won't change that behavior. Second, doing so might imply cutting
established connections and that might be confusing for the user in some
cases.

> If you can't do that maybe you could add a warning in the
> CD, like a warning in a popup that appears briefly the first time the new
> identity option is used after a boot. "Your new identity could be connected
> to your old identity by a powerful adversary. For more information click
> here."

It looks like a good idea to push that information to the user if we are
able to detect that the new identity feature has been used. So I'm
creating another ticket (but I'm not sure that's possible in the first
place):

https://labs.riseup.net/code/issues/7471

-- 
sajolida


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tails-support mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-support
To unsubscribe from this list, send an empty email to 
[email protected].

Reply via email to