Skip to content
This repository was archived by the owner on Nov 6, 2023. It is now read-only.
This repository was archived by the owner on Nov 6, 2023. It is now read-only.

privacy breach: loads FAQ from the network after installation #769

Description

@real-dam

Reported in Debian as https://bugs.debian.org/771286

The first time the browser is started after installing https-everywhere, a notification bar is shown, informing of the fact that some https enforcement is active and pointing to the toolbar button for options.

What is bad about that is that when the notification is dismissed, the browser is forced to open https://www.eff.org/https-everywhere/faq

This is a privacy breach, as it informs the authors (and user's ISP) that there is a new installation of https-everywhere.

The patch at http://anonscm.debian.org/cgit/pkg-mozext/https-everywhere.git/tree/debian/patches/no-unconditional-FAQ-load.patch adds a dedicated button to the notification bar. Pressing that button loads the FAQ page as before, and just dismissing the notification bar does nothing. In other words, it makes the user request the FAQ before loading it.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions