Trac issueshttps://gitlab.torproject.org/legacy/trac/-/issues2020-06-13T15:24:08Zhttps://gitlab.torproject.org/legacy/trac/-/issues/25713"DisableNetwork is set" log message in Tor Browser scares/confuses users2020-06-13T15:24:08ZRoger Dingledine"DisableNetwork is set" log message in Tor Browser scares/confuses usersWhen Tor Browser has trouble connecting, we tell users to go look at the logs. The first thing they see in their logs is something like
```
13/06/2017 11:31:29.600 [NOTICE] DisableNetwork is set. Tor will not make
or accept non-c...When Tor Browser has trouble connecting, we tell users to go look at the logs. The first thing they see in their logs is something like
```
13/06/2017 11:31:29.600 [NOTICE] DisableNetwork is set. Tor will not make
or accept non-control network connections. Shutting down all existing
connections.
```
and if they're hunting for a log message that gives them a hint about why Tor doesn't work, that one is easy to find and seems really related to why their tor might not work.
So we have this recurring event where users come to us and say "My Tor Browser isn't working, it says DisableNetwork is set."
Now, Tor Browser legitimately starts Tor with DisableNetwork set, so Tor Browser will have time to ask the user whether they want to use bridges or proxies or etc before their Tor starts interacting with the network. So "well stop using that option then" is hopefully not our best plan.
But I wonder if there is a smarter way to have that phrased in the logs, so users have a better chance of guessing correctly what is going on.
(Long term we want to not send Tor Browser users to go read Tor's logs. But we're not there yet either.)Tor: unspecifiedhttps://gitlab.torproject.org/legacy/trac/-/issues/33669"Pluggable Transport process terminated" but Tor keeps on going (and of cours...2020-06-13T18:21:52ZRoger Dingledine"Pluggable Transport process terminated" but Tor keeps on going (and of course doesn't work)In https://trac.torproject.org/projects/tor/ticket/33336#comment:20 I encountered the unfortunate situation where my snowflake client exited:
```
Feb 25 14:36:24.458 [warn] Pluggable Transport process terminated with status code 512
```
...In https://trac.torproject.org/projects/tor/ticket/33336#comment:20 I encountered the unfortunate situation where my snowflake client exited:
```
Feb 25 14:36:24.458 [warn] Pluggable Transport process terminated with status code 512
```
It still remains unclear whether snowflake had a bug that crashed it, or if Tor has a bug that made it close the socket to snowflake.
But either way, after this event Tor quietly cries to itself:
```
Feb 25 14:36:44.825 [warn] The connection to the SOCKS5 proxy server at 127.0.0.1:45527 just failed. Make sure that the proxy server is up and running.
```
and Tor Browser has no idea this is happening, or that trying to use Tor is now hopeless.
We should figure out something smarter that Tor should do in this situation. Perhaps it should exit, forcing the user to notice? Perhaps it should emit an event that Tor Browser picks up on? Maybe we have an even better idea?Tor: 0.4.4.x-finalGeorge KadianakisGeorge Kadianakishttps://gitlab.torproject.org/legacy/trac/-/issues/25431"Tor is censored in my country" does not cover some scenarios2020-06-13T17:44:02ZTrac"Tor is censored in my country" does not cover some scenariosI have some suggestions for Tor Browser Interface.
The configuration option which configures what ports tor browser connects through has been moved to a place where it does not appear when the configure button is clicked, and it only ac...I have some suggestions for Tor Browser Interface.
The configuration option which configures what ports tor browser connects through has been moved to a place where it does not appear when the configure button is clicked, and it only accessible after a successful connection. This could make it very difficult for people who are connecting through a firewall that only allows certain ports to configure this option, and I would suggest it is moved back.
The option to configure tor browser to use bridge relays has been renamed to "Tor is censored in my country". Even if in America, it could be a company, school, college, etc. firewall that is blocking the tor network (thus bridges would be useful). I would suggest ISP, firewall, etc, after the word Country.
**Trac**:
**Username**: oneandonlyKathleen BradeKathleen Bradehttps://gitlab.torproject.org/legacy/trac/-/issues/9541"Work Offline" button should stop/start tor (as well)2020-06-15T23:16:24Zcypherpunks"Work Offline" button should stop/start tor (as well)On the **Tor Browser Bundle 3.0alpha3** release
If you go to the menu -> Web Developer and press "Work Offline" it says:
"Tor unexpectedly exited."
Tor won't start when you disable this option again, you need to close and start the br...On the **Tor Browser Bundle 3.0alpha3** release
If you go to the menu -> Web Developer and press "Work Offline" it says:
"Tor unexpectedly exited."
Tor won't start when you disable this option again, you need to close and start the browser.
In my opinion, in addition to a NEWNYM function (#9442), there must also be the functions to stop or start Tor in this 3.0 version. The "Work Offline" button could use such functions too.
In short, there must be more control over the Tor network settings in the browser.
There is currently no way to temporarily disable Tor without closing the browser, even though I frequently need to do this.https://gitlab.torproject.org/legacy/trac/-/issues/21321.onion HTTP is shown as non-secure in Tor Browser2020-06-15T23:46:51Zcypherpunks.onion HTTP is shown as non-secure in Tor Browserblog.mozilla.org/security/2017/01/20/communicating-the-dangers-of-non-secure-http/
http version of .onion is safe. This must be the exception of that slash/ icon.blog.mozilla.org/security/2017/01/20/communicating-the-dangers-of-non-secure-http/
http version of .onion is safe. This must be the exception of that slash/ icon.https://gitlab.torproject.org/legacy/trac/-/issues/27636.onion indicator for non-self-signed but non-trusted sites2020-06-16T00:51:02ZTrac.onion indicator for non-self-signed but non-trusted sitesWith #23247 (really great addition btw!) implemented, I tried to visit https://www.ysp4gfuhnmj6b4mb.onion/
This page uses a custom CA, which is not trusted by tor browser (or any other browser by default) and is reachable through .onion...With #23247 (really great addition btw!) implemented, I tried to visit https://www.ysp4gfuhnmj6b4mb.onion/
This page uses a custom CA, which is not trusted by tor browser (or any other browser by default) and is reachable through .onion with a correct CN in the certificate.
Now currently with TB 8.0 I get a "Your connection is not secure" (SEC_ERROR_UNKNOWN_ISSUER), but at the same time a green onion+padlock indicator. This is quite confusing.
Reading through #23247 I am not sure what the intended behavior would be. But self-signed certificates are trusted when accessed through .onion. From that point of view it does not make much sense to handle certificates signed by untrusted CAs differently.
My expectation would be to not see the untrusted issuer warning and get the green onion *without* padlock indicator.
**Trac**:
**Username**: o--richardrichardhttps://gitlab.torproject.org/legacy/trac/-/issues/2854012/11 release Banner text2020-06-16T00:53:02ZSarah Stevenson12/11 release Banner textPlease create the following 6 banners where:
[Line 1, non-variable] Tor: Strength in Numbers
[Line 2, variable]
1. Keep Tor strong. Give today, and Mozilla will match your donation. https://marvelapp.com/a131e34/screen/48876408
2. ...Please create the following 6 banners where:
[Line 1, non-variable] Tor: Strength in Numbers
[Line 2, variable]
1. Keep Tor strong. Give today, and Mozilla will match your donation. https://marvelapp.com/a131e34/screen/48876408
2. Mozilla is matching every donation until 2019. Give now, and your gift becomes twice as strong.
^^ please notice that the 'Give today, and Mozilla will match your donation" phrase will change here and be: "Give now, and your gift becomes twice as strong."
3. Support internet freedom. Give today, and Mozilla will match your donation.
4. Defend the open web. Give today, and Mozilla will match your donation.
5. Support privacy and freedom online. Give today, and Mozilla will match your donation.
6. We need your support. Every dollar counts. Give today, and Mozilla will match your donation.
[Button]:
“Count me in.” To be used in English.
“Donate now.” To be used for all other languages.https://gitlab.torproject.org/legacy/trac/-/issues/270982018 "Monthly Giving" Tor Browser banner2020-06-16T00:48:58ZArthur Edelstein2018 "Monthly Giving" Tor Browser bannerOur fundraising team is proposing a browser banner for September 2018 encouraging monthly donors. We'll need text and a design very soon to get it ready for the September 4 release. This ticket is to review copy, design and code.Our fundraising team is proposing a browser banner for September 2018 encouraging monthly donors. We'll need text and a design very soon to get it ready for the September 4 release. This ticket is to review copy, design and code.https://gitlab.torproject.org/legacy/trac/-/issues/280932018 Tor Browser Android donation banner2020-06-16T00:52:11ZArthur Edelstein2018 Tor Browser Android donation bannerIn #23925 we are implementing a donation banner for the YE 2018 campaign. It would be great to have a donation banner for Tor Browser Android as well. We already have the text in https://gitweb.torproject.org/torbutton.git/tree/src/chrom...In #23925 we are implementing a donation banner for the YE 2018 campaign. It would be great to have a donation banner for Tor Browser Android as well. We already have the text in https://gitweb.torproject.org/torbutton.git/tree/src/chrome/locale/en/aboutTor.dtd#n30 getting translated.https://gitlab.torproject.org/legacy/trac/-/issues/239252018 Tor Browser donation banner2020-06-16T00:52:11ZArthur Edelstein2018 Tor Browser donation bannerFor Year End 2018 we want a fundraising banner in Tor Browser with a donation button. Let's make the activation time the same for all time zones, so we have a simultaneous launch. Or better yet, we can just launch it immediately on updat...For Year End 2018 we want a fundraising banner in Tor Browser with a donation button. Let's make the activation time the same for all time zones, so we have a simultaneous launch. Or better yet, we can just launch it immediately on update. The banner design is in progress.https://gitlab.torproject.org/legacy/trac/-/issues/270102018 UX Research2020-06-13T17:07:32ZAntonelaantonela@torproject.org2018 UX ResearchThis ticket contains 2018 UX research efforts.This ticket contains 2018 UX research efforts.nyinznyinzhttps://gitlab.torproject.org/legacy/trac/-/issues/29506<noscript> tag doesn't work when JS is blocked by security slider at Safer2020-06-16T01:01:05ZMicah Lee<noscript> tag doesn't work when JS is blocked by security slider at SaferThe <noscript> HTML tag is supposed to be hidden when JavaScript is enabled, and get displayed when it's disabled. Websites use it to inform users what things are broken without JavaScript.
When the security slider is set to Safest, all...The <noscript> HTML tag is supposed to be hidden when JavaScript is enabled, and get displayed when it's disabled. Websites use it to inform users what things are broken without JavaScript.
When the security slider is set to Safest, all JavaScript is disabled, and the <noscript> tag works like expected. But when it's set to Safer, JavaScript is disabled on non-HTTPS websites (including HTTP .onion sites), but the <noscript> tag doesn't display, but it should.https://gitlab.torproject.org/legacy/trac/-/issues/33516[Community Portal] Add an article under Onion Services with different options...2020-06-13T17:28:44ZPili Guerra[Community Portal] Add an article under Onion Services with different options for redirecting to Onion ServicesIn #30024 we are exploring different ways to redirect users to the onion version of a website when available.
We should document all the different ways in which operators of clearnet services can offer users the option to redirect to th...In #30024 we are exploring different ways to redirect users to the onion version of a website when available.
We should document all the different ways in which operators of clearnet services can offer users the option to redirect to their onion site, such as Alt-svc and Onion-Location headers.https://gitlab.torproject.org/legacy/trac/-/issues/33658[S58] O2.1: Evaluate and address Fennec vs. Fenix UI changes.2020-06-16T01:11:52ZPili Guerra[S58] O2.1: Evaluate and address Fennec vs. Fenix UI changes.- Review changes to Fenix UI and evaluate their impact in the context of Tor Browser for Android and its users using the Tor Personas tool as a guide.
- Iterate on any necessary UI changes.- Review changes to Fenix UI and evaluate their impact in the context of Tor Browser for Android and its users using the Tor Personas tool as a guide.
- Iterate on any necessary UI changes.https://gitlab.torproject.org/legacy/trac/-/issues/29833about:logo still contains Firefox logos2020-06-16T01:01:43ZGeorg Koppenabout:logo still contains Firefox logosWe fixed a lot of Firefox logos by replacing them with their Tor Browser counterparts in #25702. However, `about:logo` still shows a combination of Firefox icon and Firefox related text. We'd want to have a respective Tor Browser logo/ic...We fixed a lot of Firefox logos by replacing them with their Tor Browser counterparts in #25702. However, `about:logo` still shows a combination of Firefox icon and Firefox related text. We'd want to have a respective Tor Browser logo/icon for that one as well. (Discovered while trying to figure out what the purpose of the unmodified icons in the mobile folder is; mobile is affected, too).
The icon in question is located in `browser/branding/$series/content/about.png` for desktop and `mobile/android/branding/$series/content/about.png` for mobile.https://gitlab.torproject.org/legacy/trac/-/issues/27200about:tor favicon should be the tb icon2020-06-16T00:49:13ZTracabout:tor favicon should be the tb iconabout:tor favicon is non-existent in tb 8.0a10
**Trac**:
**Username**: ProTipGuyFWIWWeLoveARMAabout:tor favicon is non-existent in tb 8.0a10
**Trac**:
**Username**: ProTipGuyFWIWWeLoveARMAhttps://gitlab.torproject.org/legacy/trac/-/issues/25702Activity 1.1 Update Tor Browser icon to follow design guidelines.2020-06-16T01:01:43ZIsabela FernandesActivity 1.1 Update Tor Browser icon to follow design guidelines.update the globe and any other old icons - download page and website icons will be updated with the redesign work. this is just about the icons at the product.update the globe and any other old icons - download page and website icons will be updated with the redesign work. this is just about the icons at the product.Antonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/legacy/trac/-/issues/25693Activity 1.2: Make sure Firefox Photon UI works with our style guidelines2020-06-16T00:47:42ZIsabela FernandesActivity 1.2: Make sure Firefox Photon UI works with our style guidelinesFirefox Photon UI is part of upcoming changes to the Firefox ESR Browser, upon which Tor Browser is based. This activity will make sure that we review it to make sure it follows our design guidelines.
!https://design.firefox.com/photon...Firefox Photon UI is part of upcoming changes to the Firefox ESR Browser, upon which Tor Browser is based. This activity will make sure that we review it to make sure it follows our design guidelines.
!https://design.firefox.com/photon/welcome.htmlAntonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/legacy/trac/-/issues/25658Activity 2.1: Improve user understanding and user control by clarifying Tor B...2020-06-16T01:07:37ZIsabela FernandesActivity 2.1: Improve user understanding and user control by clarifying Tor Browser's security featuresThis work is related to the following proposal:
https://lists.torproject.org/pipermail/tbb-dev/2018-March/000799.html
There should also be an experience for Android. (maybe create a child ticket to track that?)This work is related to the following proposal:
https://lists.torproject.org/pipermail/tbb-dev/2018-March/000799.html
There should also be an experience for Android. (maybe create a child ticket to track that?)Antonelaantonela@torproject.orgAntonelaantonela@torproject.orghttps://gitlab.torproject.org/legacy/trac/-/issues/25694Activity 3.1: Improve the user experience of updating Tor Browser2020-06-16T01:00:59ZIsabela FernandesActivity 3.1: Improve the user experience of updating Tor BrowserFirst thing here is to review usability tickets for the updater:
* https://trac.torproject.org/projects/tor/ticket/13309
* https://trac.torproject.org/projects/tor/ticket/17594
* https://trac.torproject.org/projects/tor/ticket/1817...First thing here is to review usability tickets for the updater:
* https://trac.torproject.org/projects/tor/ticket/13309
* https://trac.torproject.org/projects/tor/ticket/17594
* https://trac.torproject.org/projects/tor/ticket/18179
* https://trac.torproject.org/projects/tor/ticket/18193
* https://trac.torproject.org/projects/tor/ticket/18948
* https://trac.torproject.org/projects/tor/ticket/19270
* https://trac.torproject.org/projects/tor/ticket/20083
All these tickets were selected back in the day when we were creating sponsor17 proposal.
So we should read what is going on at these tickets to define the problems we will try to fix.
Once we have the problems defined is when we will start drafting solutions.Antonelaantonela@torproject.orgAntonelaantonela@torproject.org