Tor Browser issueshttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues2020-06-27T14:37:27Zhttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/22545.onion sites are being labled with "insecure connection"2020-06-27T14:37:27ZNima Fatemi.onion sites are being labled with "insecure connection"After the recent update to TB 7.0 I noticed that the Tor Browser warns users that their connection to .onion sites are NOT secure with their "lock icon" crossed with a red line.
![#22545:insecure_onion.png, 300px](uploads/#22545:insecur...After the recent update to TB 7.0 I noticed that the Tor Browser warns users that their connection to .onion sites are NOT secure with their "lock icon" crossed with a red line.
![#22545:insecure_onion.png, 300px](uploads/#22545:insecure_onion.png, 300px)
And if the .onion site happens to have a password field, users gets a warning for entering their password on an insecure website.
![#22545:insecure_onion_password.png, 300px](uploads/#22545:insecure_onion_password.png, 300px)
I believe this is due to recent UX changes in Firefox to warn users against website without TLS and seems like they haven't considered .onion usecase in their design.
This terribly affects the experience of highly targeted users who might not have a clear understanding on the technology and are instructed to use .onion for their online and physical safety (eg for SecureDrop).
I'm going to mark this ticket as "blocker" because I witnessed it blocked a user from using an .onion site and Tor Browser all together. They switched back to chrome on clearnet as they were worried they're doing things wrong and that it might have compromised their security.
We should probably be a bit more careful with changes like that in future. Especially at a time like this.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/2854012/11 release Banner text2021-07-09T18:24:30ZSarah Stevenson12/11 release Banner textPlease create the following 6 banners where:
[Line 1, non-variable] Tor: Strength in Numbers
[Line 2, variable]
1. Keep Tor strong. Give today, and Mozilla will match your donation. https://marvelapp.com/a131e34/screen/48876408
2. ...Please create the following 6 banners where:
[Line 1, non-variable] Tor: Strength in Numbers
[Line 2, variable]
1. Keep Tor strong. Give today, and Mozilla will match your donation. https://marvelapp.com/a131e34/screen/48876408
2. Mozilla is matching every donation until 2019. Give now, and your gift becomes twice as strong.
^^ please notice that the 'Give today, and Mozilla will match your donation" phrase will change here and be: "Give now, and your gift becomes twice as strong."
3. Support internet freedom. Give today, and Mozilla will match your donation.
4. Defend the open web. Give today, and Mozilla will match your donation.
5. Support privacy and freedom online. Give today, and Mozilla will match your donation.
6. We need your support. Every dollar counts. Give today, and Mozilla will match your donation.
[Button]:
“Count me in.” To be used in English.
“Donate now.” To be used for all other languages.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/407671px white border visible on fullscreen video playback2022-11-29T16:54:19Zdonuts1px white border visible on fullscreen video playbackTo reproduce, play a video fullscreen. Note the 1px white border on the sides and bottom of the screen.
This doesn't occur in Firefox, so I'm not sure if there's an additional fingerprinting concern here too (i.e. from TB users' fullscr...To reproduce, play a video fullscreen. Note the 1px white border on the sides and bottom of the screen.
This doesn't occur in Firefox, so I'm not sure if there's an additional fingerprinting concern here too (i.e. from TB users' fullscreen resolutions being slightly different from FF users for the same devices, although I see [bug 1450401](https://bugzilla.mozilla.org/show_bug.cgi?id=1450401) is still open anyway).ma1ma1https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/270982018 "Monthly Giving" Tor Browser banner2020-06-27T14:35:22ZArthur Edelstein2018 "Monthly Giving" Tor Browser bannerOur fundraising team is proposing a browser banner for September 2018 encouraging monthly donors. We'll need text and a design very soon to get it ready for the September 4 release. This ticket is to review copy, design and code.Our fundraising team is proposing a browser banner for September 2018 encouraging monthly donors. We'll need text and a design very soon to get it ready for the September 4 release. This ticket is to review copy, design and code.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/280932018 Tor Browser Android donation banner2020-06-27T14:34:43ZArthur Edelstein2018 Tor Browser Android donation bannerIn legacy/trac#23925 we are implementing a donation banner for the YE 2018 campaign. It would be great to have a donation banner for Tor Browser Android as well. We already have the text in https://gitweb.torproject.org/torbutton.git/tre...In legacy/trac#23925 we are implementing a donation banner for the YE 2018 campaign. It would be great to have a donation banner for Tor Browser Android as well. We already have the text in https://gitweb.torproject.org/torbutton.git/tree/src/chrome/locale/en/aboutTor.dtd#n30 getting translated.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/239252018 Tor Browser donation banner2020-06-27T14:36:47ZArthur Edelstein2018 Tor Browser donation bannerFor Year End 2018 we want a fundraising banner in Tor Browser with a donation button. Let's make the activation time the same for all time zones, so we have a simultaneous launch. Or better yet, we can just launch it immediately on updat...For Year End 2018 we want a fundraising banner in Tor Browser with a donation button. Let's make the activation time the same for all time zones, so we have a simultaneous launch. Or better yet, we can just launch it immediately on update. The banner design is in progress.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/164418-month-old Tor Browser offers to "Reset Tor Browser", removes extensions2023-08-24T18:57:11ZDavid Fifielddcf@torproject.org8-month-old Tor Browser offers to "Reset Tor Browser", removes extensionsI started an old copy of Tor Browser 4.0 I had in a directory. From file times it looks like it was last run on 2014-10-21, 8 months ago (today is 2015-06-24). When I started it, the about:tor page showed a banner at the bottom
It look...I started an old copy of Tor Browser 4.0 I had in a directory. From file times it looks like it was last run on 2014-10-21, 8 months ago (today is 2015-06-24). When I started it, the about:tor page showed a banner at the bottom
It looks like you haven't started Tor Browser in a while. Do you want to clean it up for a fresh, like-new experience? And by the way, welcome back!
with a button that says "Reset Tor Browser..."
When I click on the button, the browser restarts and gives me the plain Firefox start page, with the Firefox logo and everything. It looks like all the extensions are gone (HTTPS-Everywhere, NoScript, Torbutton, Tor Launcher). check.torproject.org says the browser is using Tor. I also got a banner offering to update to 5.0a2.
I was trying the instructions from [[doc/TorBrowser/Hacking#UsinganExistingTorProcess]] so I had run
```
export TOR_SOCKS_PORT=9050
export TOR_SKIP_LAUNCH=1
./start-tor-browser
```
I don't know if that had anything to do with it.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/29506<noscript> tag doesn't work when JS is blocked by security slider at Safer2022-11-29T15:37:10ZMicah Lee<noscript> tag doesn't work when JS is blocked by security slider at SaferThe <noscript> HTML tag is supposed to be hidden when JavaScript is enabled, and get displayed when it's disabled. Websites use it to inform users what things are broken without JavaScript.
When the security slider is set to Safest, all...The <noscript> HTML tag is supposed to be hidden when JavaScript is enabled, and get displayed when it's disabled. Websites use it to inform users what things are broken without JavaScript.
When the security slider is set to Safest, all JavaScript is disabled, and the <noscript> tag works like expected. But when it's set to Safer, JavaScript is disabled on non-HTTPS websites (including HTTP .onion sites), but the <noscript> tag doesn't display, but it should.ma1ma1https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40602[Android] Display complete URL in the address box2022-07-13T22:51:27Zkulsoom.zahrakulsoomzahra24@gmail.com[Android] Display complete URL in the address boxFrom RT:
Show the complete URL in the address box so the user can be sure whether it's HTTPS or HTTP.
Problem with HTTPS - when I try to access an **https** web address, the **https** keeps changing to **http** on the Tor Browser.From RT:
Show the complete URL in the address box so the user can be sure whether it's HTTPS or HTTP.
Problem with HTTPS - when I try to access an **https** web address, the **https** keeps changing to **http** on the Tor Browser.https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40839[Connection Settings] Add "Copied!" state to Copy Bridge Address button2022-04-13T00:22:42Zdonuts[Connection Settings] Add "Copied!" state to Copy Bridge Address buttonThe "Copy Bridge Address" button could use a little feedback when pressed. Could we:
- Update the string to "Copied!"
- Change the color to Blue/Teal (depending on the theme)
- Return the button to its original state after ~1200ms
Like...The "Copy Bridge Address" button could use a little feedback when pressed. Could we:
- Update the string to "Copied!"
- Change the color to Blue/Teal (depending on the theme)
- Return the button to its original state after ~1200ms
Like so please?
![obsf4-bridge-card-copied](/uploads/dbab4e63aba5cd8ffe7d3bdb0a7a1f02/obsf4-bridge-card-copied.png)
I've thrown together a quick prototype to demonstrate the intended behavior too: [Figma link](https://www.figma.com/proto/Vsh1aPOZGneDX4Zp27mjsK/torconnect?page-id=1667%3A11813&node-id=1667%3A11815&viewport=241%2C48%2C0.44&scaling=min-zoom&starting-point-node-id=1667%3A12290)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40838[Connection Settings] Add kebab menu to bridge card with option to “Remove”2022-04-13T00:22:47Zdonuts[Connection Settings] Add kebab menu to bridge card with option to “Remove”Should the bridge card switch be repurposed in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40837 to switch between enabled/disabled states, please add a kebab menu as visualized in https://gitlab.torproject.org/tp...Should the bridge card switch be repurposed in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40837 to switch between enabled/disabled states, please add a kebab menu as visualized in https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782 containing the option to "Remove" the bridge entirely.
The exact UX should match addon the cards in `about:addons#extensions`.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40837[Connection Settings] Add switch to "...current bridges" section to enable/di...2022-04-13T00:22:51Zdonuts[Connection Settings] Add switch to "...current bridges" section to enable/disable all bridgesIn the current build the bridge card switch effectively clears the configured bridge from the settings screen entirely.
Instead, could we use the switch to enable/disable the bridge without removing it – essentially leaving it in a sta...In the current build the bridge card switch effectively clears the configured bridge from the settings screen entirely.
Instead, could we use the switch to enable/disable the bridge without removing it – essentially leaving it in a state of being "off" but still readily available for future use? The disabled state should be set to 60% opacity and the preceding string appended with `(disabled)`, like so:
![connection-settings-bridge-disabled_2x](/uploads/aca5817664b9be85b3f6630e20113cd9/connection-settings-bridge-disabled_2x.png)
I've prototyped the intended functionality here too: [Figma link](https://www.figma.com/proto/Vsh1aPOZGneDX4Zp27mjsK/torconnect?page-id=1667%3A11813&node-id=1667%3A11815&viewport=241%2C48%2C0.34&scaling=min-zoom&starting-point-node-id=1667%3A12290)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40883[Connection Settings] Ask for confirmation before removing all bridges2022-05-17T10:33:21ZPier Angelo Vendrame[Connection Settings] Ask for confirmation before removing all bridgesFor #40861 we added a button to remove all the bridge lines at once.
However, users may confuse it with a "collapse bridge lines" again, and click it by mistake.
Therefore, we should ask whether they are sure they really want to delete...For #40861 we added a button to remove all the bridge lines at once.
However, users may confuse it with a "collapse bridge lines" again, and click it by mistake.
Therefore, we should ask whether they are sure they really want to delete all the bridges.Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40895[Connection Settings] Expand bridge automatically if connected (or it's the o...2022-05-17T10:34:12Zdonuts[Connection Settings] Expand bridge automatically if connected (or it's the only one)Would it be possible to automatically expand the bridge card in connection settings if it meets one of the following conditions?
- It's the one Tor Browser is currently connected to
- Or if it's the only bridge configuredWould it be possible to automatically expand the bridge card in connection settings if it meets one of the following conditions?
- It's the one Tor Browser is currently connected to
- Or if it's the only bridge configuredSponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40835[Connection Settings] Fix typo in Tor Network connected state2022-04-13T00:23:02Zdonuts[Connection Settings] Fix typo in Tor Network connected stateThe Tor Network connected state accidentally reads "Connnected" (with three Ns).
![connection-settings-tor-network-connected-typo](/uploads/472d406ad05c00e1073b2fa54bae02b2/connection-settings-tor-network-connected-typo.png)The Tor Network connected state accidentally reads "Connnected" (with three Ns).
![connection-settings-tor-network-connected-typo](/uploads/472d406ad05c00e1073b2fa54bae02b2/connection-settings-tor-network-connected-typo.png)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40861[Connection Settings] Rejig the UI to support multiple bridge lines2022-04-12T21:35:35Zdonuts[Connection Settings] Rejig the UI to support multiple bridge linesNow we have an accordion designed to support multiple bridge lines, Let's update the wip `about:preferences#connection` pane.
See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782#note_2789998 for mockups and not...Now we have an accordion designed to support multiple bridge lines, Let's update the wip `about:preferences#connection` pane.
See https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40782#note_2789998 for mockups and notes on intended behavior.
Here for the Figma file: [Figma link](https://www.figma.com/file/eL7fo8Fdy8cexelqoLP90e/about%3Apreferences%23connection?node-id=3%3A4221)
And the following links for slightly buggy prototypes:
- [Not connected accordion](https://www.figma.com/proto/eL7fo8Fdy8cexelqoLP90e/about%3Apreferences%23connection?page-id=3%3A4221&node-id=3%3A9406&viewport=289%2C48%2C0.32&scaling=min-zoom&starting-point-node-id=3%3A4349)
- [Connected accordion](https://www.figma.com/proto/eL7fo8Fdy8cexelqoLP90e/about%3Apreferences%23connection?page-id=3%3A4221&node-id=23%3A2923&viewport=289%2C48%2C0.32&scaling=min-zoom&starting-point-node-id=3%3A4349)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40841[Connection Settings] Remove the periods from the "Advanced" section strings2022-04-13T00:22:32Zdonuts[Connection Settings] Remove the periods from the "Advanced" section stringsPlease remove the periods from the following strings:
`Configure how Tor Browser connects to the internet.`
`View the Tor logs.`
So they appear like so instead:
`Configure how Tor Browser connects to the internet`
`View the Tor logs...Please remove the periods from the following strings:
`Configure how Tor Browser connects to the internet.`
`View the Tor logs.`
So they appear like so instead:
`Configure how Tor Browser connects to the internet`
`View the Tor logs`
(I don't know why I kept the periods in the mockups, but as far as I can tell this is more consistent with the rest of `about:preferences` and looks a little less awkward too)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40894[Connection Settings] Switch the bridge line text to grey-602022-05-17T10:34:03Zdonuts[Connection Settings] Switch the bridge line text to grey-60Could you lighten the bridge line text (e.g. "obfs4 185.82.202.15:443 07E3239A...") in both the collapsed and expanded states to grey-60 please?
I think it's slightly easier on the eye when there are a lot of bridge lines visible:
![co...Could you lighten the bridge line text (e.g. "obfs4 185.82.202.15:443 07E3239A...") in both the collapsed and expanded states to grey-60 please?
I think it's slightly easier on the eye when there are a lot of bridge lines visible:
![connected-builtin-obfs4-expanded_2x](/uploads/4bd69a890b2f8bd14f47b9409d6fe3d9/connected-builtin-obfs4-expanded_2x.png)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40840[Connection Settings] Update "Learn More" to "Learn more" (sentence case)2022-04-13T00:22:37Zdonuts[Connection Settings] Update "Learn More" to "Learn more" (sentence case)This string appears on the other settings screens as `Learn more` (in sentence case). Could we update the string we're using in Connection Settings to match please?This string appears on the other settings screens as `Learn more` (in sentence case). Could we update the string we're using in Connection Settings to match please?Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendramehttps://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40844[Connection Settings] Update formatting of the bridge card's bridge-moji2022-04-13T00:22:21Zdonuts[Connection Settings] Update formatting of the bridge card's bridge-mojiI've been mulling over the bridge-moji and I'm starting to think it's probably too abstract as a concept, and runs the risk of causing more confusion than it alleviates. However we could still push it into Nightly & Alpha for feedback wi...I've been mulling over the bridge-moji and I'm starting to think it's probably too abstract as a concept, and runs the risk of causing more confusion than it alleviates. However we could still push it into Nightly & Alpha for feedback with some light design amends:
![connection-settings-bridge-configured_2x](/uploads/8b1b14613ddd5685394021aa696dd66b/connection-settings-bridge-configured_2x.png)
Changes include:
- Each emoji square is 36px with 4px rounded corners and a 4px margin between each
- The emoji themselves are 20px
- the "What's this?" link can be hidden/ignored until the tb-manual is updated.
I've started a new page in Figma for these changes here: [Figma link](https://www.figma.com/file/Vsh1aPOZGneDX4Zp27mjsK/torconnect?node-id=1667%3A11813)Sponsor 96: Rapid Expansion of Access to the Uncensored Internet through Tor in China, Hong Kong, & TibetPier Angelo VendramePier Angelo Vendrame