[Trisquel-devel] [Testing] Abrowser 130.0.1 for testing

[Luis Guzman]

En 26/09/24 05:49, David Lecompte escribió:
> In previous versions of abrowser, by default abrowser is asking to save
> passwords. Is there a reason specific to v130 to remove that behaviour, or
> was it some todo thing already before that is just done now?

The reason it became  part of the default behavior is because it landed 
like any other feature on Firefox, not something the Trisquel team 
actively promoted, lately we are taking the time to go further and check 
stuff into more detail, maybe you have noticed that in the maintenance 
work done in the last couple of years.

By default Mozilla thinks that if you enable store password on your 
browser, then by default you also want Firefox Relay service in it. 
Since it is a Mozilla-run service then they argue is best to have it 
enabled by default, no need for you to enable it.

This is what rise a concern point for me, as it could mean that any 
"feature" could be used to "promo-force" services into the users and if 
the feature already have debatable security risks, I think this v130 
release having several changes (coming since v128) would be a good 
starting point to avoid promoting it in particular.

On the other hand, I would like to rise the awareness on Mozilla's 
Firefox approach on their design, and also bring awareness to improve 
the security when it comes to what options are better to store sensitive 
data, finally, as I keep reiterating, the feature is still there, anyone 
can use it if they want to, they are just one click away.

Regards.

-- 
Cuanto más gente resista, más gente va a ser Libre, y
más gente va a ser libre para ser Libre.

Por tu propio bien, y en solidaridad a todos,
elige la libertad.

¡Sé Libre!
http://fsfla.org/selibre/

Luis A. Guzmán G.
http://ark.switnet.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20240926/4e277c48/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x35AD8DB3BE2C988C.asc
Type: application/pgp-keys
Size: 7193 bytes
Desc: OpenPGP public key
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20240926/4e277c48/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20240926/4e277c48/attachment.sig>