Security/Fennec+Tor Project

From MozillaWiki
Jump to navigation Jump to search

Requirements

In order to empower Fennec the same capability as Orfox, the Tor Browser on Android, we have to meet the following minimal requirements.

  • All network connections (Gecko and Java code) must be proxied.
  • Only allow incognito mode (e.g. turn off JavaScript, WebRTC, etc.)
  • Run NoScript and HTTPS Everywhere
  • Apply all the Tor Browser patches


Value Proposition of Tor on Fennec

It would be awesome if Fennec could prompt the user with something like "you have Orbot installed, which is a secure network proxy which allows to:"

  • Bypass censorship
  • Improve network security on unsecure network
  • Access .onion sites

Caveat!!
Before we are certain that Fennec has the same level of anonymity features as Orfox does, don't use the word anonymous because it provides a false sense of security to users.

Bug Tracking

All Fennec+Tor bugs are being tracked by the meta bug: bug 1357994 - [META] Tor on Fennec

Priority Definition

  • P1: Must Have for MVP
  • P2: Nice to Have
  • P3: Backlog
  • P5: Not in our plan but welcome to patches


Dashboard

P1 Bugs

Bugzilla query error

Array ( [type] => error [message] => http-bad-status [params] => Array ( [0] => 429 [1] => Unknown Error ) ) 1


P2 Bugs

Bugzilla query error

Array ( [type] => error [message] => http-bad-status [params] => Array ( [0] => 429 [1] => Unknown Error ) ) 1


P3-P5 Bugs

Bugzilla query error

Array ( [type] => error [message] => http-bad-status [params] => Array ( [0] => 429 [1] => Unknown Error ) ) 1


To Be Triaged

Bugzilla query error

Array ( [type] => error [message] => http-bad-status [params] => Array ( [0] => 429 [1] => Unknown Error ) ) 1