Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: Redirect .onion URLs to a private window with Tor, if possible. #2418

Closed
wants to merge 1 commit into from

Conversation

riastradh-brave
Copy link
Contributor

fix brave/brave-browser#806

  • If there is no private window with Tor open, fail.

    => TODO: This should fail noisily, beyond a console message.

    => One may be tempted to just create a private window with Tor, but:
    . This is not obviously easy to do here.
    . Users may not be happy if simply clicking a link can have the
    effect of using Tor when they didn't intend.

  • If there is a private window with Tor open, create a new tab to load
    the page.

    => User expectations around onion services are likely to be that
    they provide anonymity, so opening them in the non-anonymous
    window may be surprising.

    => It is not clear how easy it would be to load in a non-Tor window
    and ensure that everything is nevertheless loaded through Tor --
    and likewise links from it, &c.

Submitter Checklist:

Test Plan:

  1. Start a fresh Brave instance.
  2. In a non-Tor window, open a .onion site like http://duskgytldkxiuqc6.onion/ or https://facebookcorewwwi.onion/
  3. Confirm that it fails.
  4. Open a private window with Tor.
  5. Again in a non-Tor window, open the .onion site again.
  6. Confirm that it opens in the private window with Tor instead.

Reviewer Checklist:

  • New files have MPL-2.0 license header.
  • Request a security/privacy review as needed.
  • Adequate test coverage exists to prevent regressions
  • Verify test plan is specified in PR before merging to source

After-merge Checklist:

  • The associated issue milestone is set to the smallest version that the
    changes has landed on.
  • All relevant documentation has been updated.

@riastradh-brave riastradh-brave added feature/tor CI/skip Do not run CI builds (except noplatform) labels May 10, 2019
@riastradh-brave riastradh-brave force-pushed the riastradh-806-onionseverywhere branch from 61a353a to b23fa02 Compare May 10, 2019 21:21
@riastradh-brave riastradh-brave force-pushed the riastradh-806-onionseverywhere branch from b23fa02 to 173fd11 Compare May 24, 2019 19:03
fix brave/brave-browser#806

- If there is no private window with Tor open, fail.

  => TODO: This should fail noisily, beyond a console message.

  => One may be tempted to just create a private window with Tor, but:
     . This is not obviously easy to do here.
     . Users may not be happy if simply clicking a link can have the
       effect of using Tor when they didn't intend.

- If there is a private window with Tor open, create a new tab to load
  the page.

  => User expectations around onion services are likely to be that
     they provide anonymity, so opening them in the non-anonymous
     window may be surprising.

  => It is not clear how easy it would be to load in a non-Tor window
     and ensure that everything is nevertheless loaded through Tor --
     and likewise links from it, &c.
@riastradh-brave riastradh-brave force-pushed the riastradh-806-onionseverywhere branch from 173fd11 to c7951e2 Compare June 19, 2019 14:34
@bbondy
Copy link
Member

bbondy commented Jul 17, 2019

Is this still valid? No updates for a month. Thanks.

@riastradh-brave
Copy link
Contributor Author

This is a draft that will likely need to be updated when we have finished reworking Tor profiles.

@bsclifton
Copy link
Member

Closing as stale. We can keep the branch of course, in case we wanted to revisit

@bsclifton bsclifton closed this Jun 18, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CI/skip Do not run CI builds (except noplatform) feature/tor
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Handle .onions in all contexts
3 participants