Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2022-09-01T22:43:11Zhttps://gitlab.torproject.org/legacy/trac/-/issues/28800Implement New Identity functionality for Tor Browser on Android2022-09-01T22:43:11ZGeorg KoppenImplement New Identity functionality for Tor Browser on AndroidWe want to have an easy to use New Identity functionality for Tor Browser for Android. Currently there is some New Identity-like functionality provided by Orbot but a) that's only responsible for circuit-switching and b) it is not clear ...We want to have an easy to use New Identity functionality for Tor Browser for Android. Currently there is some New Identity-like functionality provided by Orbot but a) that's only responsible for circuit-switching and b) it is not clear whether we stick to Orbot in our grand scheme of things.https://gitlab.torproject.org/legacy/trac/-/issues/34409Implement Onion Location UI on Android2020-06-15T23:01:29ZMatthew FinkelImplement Onion Location UI on Android".onion available"".onion available"https://gitlab.torproject.org/legacy/trac/-/issues/30570Implement per-site security settings support2020-06-16T01:04:10ZGeorg KoppenImplement per-site security settings supportThe native (without messing with the NoScript menu) per-site security settings support mentioned in proposal 101 (https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101-security-controls-redesign.txt) is still missing. Thi...The native (without messing with the NoScript menu) per-site security settings support mentioned in proposal 101 (https://gitweb.torproject.org/tor-browser-spec.git/tree/proposals/101-security-controls-redesign.txt) is still missing. This ticket is for implementing it.richardrichardhttps://gitlab.torproject.org/legacy/trac/-/issues/24717Improve design of relay and bridge badges and map overlay2020-06-13T07:24:11ZirlImprove design of relay and bridge badges and map overlayThe code that draws the badges is at the end of the org.torproject.metrics.bot.BaseRelayImpl class:
https://gitweb.torproject.org/user/irl/metrics-bot.git/tree/src/main/java/org/torproject/metricsbot/tor/BaseRelayImpl.java#n297
For the...The code that draws the badges is at the end of the org.torproject.metrics.bot.BaseRelayImpl class:
https://gitweb.torproject.org/user/irl/metrics-bot.git/tree/src/main/java/org/torproject/metricsbot/tor/BaseRelayImpl.java#n297
For the redesign, mockups are all that's needed as I can do the actual Java code, but it might help to see how they are created. Essentially it builds up the image by drawing on to a canvas at fixed coordinates.
These badges are then converted into a bitmap image and uploaded for Twitter and Mastodon. The size of the badge is currently based on some "best practices" I found on a blog for Twitter, it works mostly in Mastodon too but I wonder if a change of size/aspect ratio would be useful.
In the future, I'd like to write JavaScript too that can build these as SVGs for dynamic inclusion in web pages so that relay/bridge operators can include them on their blog. These means that any dynamic text must be in a font we're allowed to embed.
There are currently 3 image types generated by metrics-bot:
Relay: https://twitter.com/TorAtlas/status/944267221769089024
Bridge: https://twitter.com/TorAtlas/status/944255643728441344
World Map: https://twitter.com/TorAtlas/status/944255648551849987
The world map image is mostly generated by xplanet (http://xplanet.sourceforge.net/) but there is an overlay bar at the bottom to add branding.
One idea that I have been thinking about is adding a "country" badge, which shows relay count, distinct AS count and advertised bandwidth alongside an image of the outline of the shape of that country, but I have no idea where I would get the country shapes from.irlirlhttps://gitlab.torproject.org/legacy/trac/-/issues/24497Improve documentation for tor relay operators2020-10-30T02:33:54ZArthur EdelsteinImprove documentation for tor relay operatorsThe documentation is somewhat confusing and incomplete.
irl has been collecting instructions here:
https://trac.torproject.org/projects/tor/wiki/OperatorsTipsThe documentation is somewhat confusing and incomplete.
irl has been collecting instructions here:
https://trac.torproject.org/projects/tor/wiki/OperatorsTipshttps://gitlab.torproject.org/legacy/trac/-/issues/25764Improve how circuits are displayed to the user on Android2020-06-16T01:28:13ZAntonelaantonela@torproject.orgImprove how circuits are displayed to the user on AndroidTBA work on parent ticketTBA work on parent tickethttps://gitlab.torproject.org/legacy/trac/-/issues/30259Improve verify signature flow for Tor Browser2020-06-13T17:28:02ZAntonelaantonela@torproject.orgImprove verify signature flow for Tor BrowserVerifying signature is a painful process for regular and power users. This ticket aims to explore how we can improve it.Verifying signature is a painful process for regular and power users. This ticket aims to explore how we can improve it.Antonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/legacy/trac/-/issues/27506In RTL languages, the onboarding bubble covers the version info2020-06-16T00:50:19ZMark SmithIn RTL languages, the onboarding bubble covers the version infoWhen a right-to-left language is used, the onboarding bubble is (correctly) moved to the right side of the about:tor page. Unfortunately, the Tor Browser version information is not moved and so it is covered by the onboarding bubble. I w...When a right-to-left language is used, the onboarding bubble is (correctly) moved to the right side of the about:tor page. Unfortunately, the Tor Browser version information is not moved and so it is covered by the onboarding bubble. I will attach a screenshot.https://gitlab.torproject.org/legacy/trac/-/issues/31286Include bridge configuration into about:preferences2020-06-24T11:26:19ZGeorg KoppenInclude bridge configuration into about:preferencesTorbutton as a standalone extension is going away (#10760) and while doing so we restructure our toolbar making it more usable by exposing New Identity directly on it (#27511). However, we need to find a new home for the bridge configura...Torbutton as a standalone extension is going away (#10760) and while doing so we restructure our toolbar making it more usable by exposing New Identity directly on it (#27511). However, we need to find a new home for the bridge configuration as well if we want to remove the onion button from the toolbar. The current plan is to move it to `about:preferences` as a general setting. This ticket tracks that work.richardrichardhttps://gitlab.torproject.org/legacy/trac/-/issues/24664Include Tor Icons in Style Guide2020-06-13T17:25:56ZirlInclude Tor Icons in Style GuideIcons were created in #24399. These should be included in the style guide, along with pre-built webfonts and a link to the sources to build PNG assets or for the raw SVG sources.Icons were created in #24399. These should be included in the style guide, along with pre-built webfonts and a link to the sources to build PNG assets or for the raw SVG sources.irlirlhttps://gitlab.torproject.org/legacy/trac/-/issues/23022Increase lead image bottom spacing; reduce top spacing2020-06-13T17:10:17ZstephwIncrease lead image bottom spacing; reduce top spacingAdd 1.5em to the margin-bottom of the blog post leading image.Add 1.5em to the margin-bottom of the blog post leading image.HiroHirohttps://gitlab.torproject.org/legacy/trac/-/issues/22980Indicate Security Slider Level applies globally2020-06-15T23:45:59ZArthur EdelsteinIndicate Security Slider Level applies globallyWhen a user adjust the security settings, it applies to all tabs (currently open and in the future). So we should probably add something in the security slider text to indicate that.When a user adjust the security settings, it applies to all tabs (currently open and in the future). So we should probably add something in the security slider text to indicate that.https://gitlab.torproject.org/legacy/trac/-/issues/24527Inform users in Tor Launcher of which settings are best for them based on the...2020-06-16T01:01:15ZArturo FilastòInform users in Tor Launcher of which settings are best for them based on their countryTor Browser Launcher would, for countries where we know Tor to either work for sure or not work for sure, advise users on whether to use a bridge or not.
This does open the question of "How does Tor Launcher know the country of the user...Tor Browser Launcher would, for countries where we know Tor to either work for sure or not work for sure, advise users on whether to use a bridge or not.
This does open the question of "How does Tor Launcher know the country of the user"?
I think this is at the end of the day a UX question, that can have various ways of doing it. For example you can have the user input their country (but that is maybe a bit sketchy from the users perspective) or you could show them a list of countries where tor is known to work OK and a list of where it's known to not work.Mark SmithMark Smithhttps://gitlab.torproject.org/legacy/trac/-/issues/28044Integrate Tor Launcher into tor-browser2020-06-13T17:44:15ZGeorg KoppenIntegrate Tor Launcher into tor-browserWe need to move away from our XPCOM extensions, Tor Launcher being one of them. As for Tor Browser it might be hard/impossible, if we tried to reimplement everything Tor Launcher does with the WebExtensions API. Instead we plan to integr...We need to move away from our XPCOM extensions, Tor Launcher being one of them. As for Tor Browser it might be hard/impossible, if we tried to reimplement everything Tor Launcher does with the WebExtensions API. Instead we plan to integrate it tighter into the browser itself making use of its capabilities.
This ticket is the parent ticket for this plan.
We need probably a proposal making sure we have the plan right before going to implement it.Kathleen BradeKathleen Bradehttps://gitlab.torproject.org/legacy/trac/-/issues/10760Integrate TorButton to TorBrowser core to prevent users from disabling it2020-06-16T01:05:59ZTracIntegrate TorButton to TorBrowser core to prevent users from disabling itI mean integration like this with pdf.js addon, which was simply integrated to Firefox core.
**Trac**:
**Username**: RezonansowyI mean integration like this with pdf.js addon, which was simply integrated to Firefox core.
**Trac**:
**Username**: Rezonansowyhttps://gitlab.torproject.org/legacy/trac/-/issues/22982Introduce a single "adjust security" toolbar button for security slider and n...2020-06-15T23:46:01ZArthur EdelsteinIntroduce a single "adjust security" toolbar button for security slider and noscript optionsRight now, the security slider is buried under a submenu. We could promote it to its own toolbar buttun/popup menu, similar to how ninavizz suggested in #21183. And we could move needed NoScript functionality (namely "temporarily whiteli...Right now, the security slider is buried under a submenu. We could promote it to its own toolbar buttun/popup menu, similar to how ninavizz suggested in #21183. And we could move needed NoScript functionality (namely "temporarily whitelist video/audio/scripts for this tab") from the NoScript dropdown to the security popup. Other dangerous NoScript functionality could be omitted altogether (including "Allow Scripts Global" and "Options".
Finally the security slider button could have a decoration that indicates the current setting "H/M/L" as well as a second indicator showing whether we have temporarily whitelisted for this tab.https://gitlab.torproject.org/legacy/trac/-/issues/32324Introduce Letterboxing to users2020-06-16T01:09:08ZAntonelaantonela@torproject.orgIntroduce Letterboxing to usersWe enabled letterboxing by default in TB9.0, and some users were confused about it.
https://blog.torproject.org/comment/284569#comment-284569
https://blog.torproject.org/comment/284575#comment-284575
This ticket aims to collect the ef...We enabled letterboxing by default in TB9.0, and some users were confused about it.
https://blog.torproject.org/comment/284569#comment-284569
https://blog.torproject.org/comment/284575#comment-284575
This ticket aims to collect the efforts to explain to users what this feature does and why it is relevant.https://gitlab.torproject.org/legacy/trac/-/issues/28628Introduce New Security Settings to users2020-06-16T00:58:39ZAntonelaantonela@torproject.orgIntroduce New Security Settings to usersThe proposal includes a section 3. which contemplates the way we are informing users about the new behavior.The proposal includes a section 3. which contemplates the way we are informing users about the new behavior.donutsdonutshttps://gitlab.torproject.org/legacy/trac/-/issues/31768Introduce Tor network settings and other updates in TB9 onboarding2020-06-16T01:07:36ZAntonelaantonela@torproject.orgIntroduce Tor network settings and other updates in TB9 onboardingWe should update users on the following changes:
- The Tor button is not at the toolbar anymore.
- Tor Network Settings were moved from the Tor button to `about:preferences#tor`
https://trac.torproject.org/projects/tor/ticket/31286
- ...We should update users on the following changes:
- The Tor button is not at the toolbar anymore.
- Tor Network Settings were moved from the Tor button to `about:preferences#tor`
https://trac.torproject.org/projects/tor/ticket/31286
- New Identity has a new icon at the toolbar and at the [≡] menu
https://trac.torproject.org/projects/tor/ticket/27511https://gitlab.torproject.org/legacy/trac/-/issues/28259Is not saving history hurting Tor Browser retention rates?2020-06-16T00:52:36ZArthur EdelsteinIs not saving history hurting Tor Browser retention rates?The main unique value that Tor Browser provides is network privacy. But we also enable private browsing mode by default, which means history and passwords are not saved.
That's actually pretty inconvenient for a modern web browser. Ever...The main unique value that Tor Browser provides is network privacy. But we also enable private browsing mode by default, which means history and passwords are not saved.
That's actually pretty inconvenient for a modern web browser. Every time the user starts Tor Browser, they don't get the convenience of Restore Session, auto-login, recent pages, history-based completion, importing user data from other browsers, and Sync. This issue was raised in [Gallagher et al 2018](https://lists.torproject.org/pipermail/ux/attachments/20180921/c901ae9f/attachment-0001.pdf)
So, we could consider allowing users to open a "normal browsing" window, that retains history and passwords and even uses "Firefox Sync". They would still get the benefit of network privacy. Saved state could be locked behind a master password, or we could remind users to use whole-disk encryption.
My hypothesis is that this approach could help retain users and enable more users to use Tor Browser as their "main browser". But it would require an analysis of the pros and cons and a careful redesign. We also would need to fix all unpatched network privacy in normal browsing.
So in this ticket I'm proposing we analyze this idea: figure out the best possible design, and determine if the benefits outweigh the costs.