-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add extension support for Tor windows #2761
Comments
@Techguyprivate Totally forgot about that hidden toggle, thanks a bunch! Only works for incognito, but it seems from the comments below that Tor extensions are being worked on |
cc: @posix4e do you have an update? |
Yep we have been working for this and we have something soon. I'll have my friend helping speak up on the issue. |
For sure, started looking into adding privacy pass for tor |
@durch Is my friend helping on the project. |
The controls should eventually be the same for Tor windows — just another toggle. But to do that, we ned to get a way from from using guest windows as the basis for Tor, and rebuild them as another type of session more like regular private windows. |
@tomlowenthal So confirming the steps are
Do we wanna install this extension by default, or just keep brave users hitting a ton of captchas til they install the extension? |
@posix4e I hate captchas and I wasn't even aware of Privacy Pass until you just now mentioned it, and now that you did I'm definitely installing! 😅 I think we can safely assume that users would prefer a default installed extension to having to solve numerous captchas to the point of frustration and then only possibly researching for a solution (most would probably remain ignorant like myself). TorBrowser does the same thing with the "HTTPS Everywhere" extension and many others. Also, Privacy Pass is BSD-3 open source. Also I found this other well-reviewed and open source anti-CAPTCHA extension, Buster |
After further the discussion we will
|
i came here to request extensions in tor just so that i could add privacy pass |
Just an update, we're ramping up here, hopefully we'll have something to show soonish :) |
Looking forward for this, thanks! |
Any progress since March 5? |
Any progress? |
We have a PR to add the Privacy Pass extension here -> brave/brave-core#2576. Extensions in TOR are WIP here -> brave/brave-core#2724, once both of those wrap up PP will be a part of Brave and will be usable in both Private and Tor modes. |
"Once both of those wrap up" is a rather fuzzy estimate. |
"Once these two prerequisites that have been stalled for months without any sign of progress (apart from bumping the target milestone without explanation) are satisfied, we will have this feature like immediately-ish". |
Any update on this? We understand the preliminary cautions that should be taken, but for rather secure extensions e.g; NoScript, just as it's in TOR Browser. This would be an added benefit to be available in Brave TOR Windows. |
@NuBz-GeN there are a lot of things to work through and this does have a priority set (relative to other priorities). There was a person working on this over a year ago but that work had been put on hold. cc: @darkdh who has been solving other Tor issues and @diracdeltas who is familiar with prior work done |
I believe @darkdh is looking at this now - can you confirm? 😄 |
Currently working on moving tor from session profile to OTR profile (#12429) which will be the ground work for extension support. So I will work on this issue next. |
@shengchalover extensions operate in one of two modes: split or spanning. In split mode there is a separate extension process for regular, tor and private modes. In spanning mode there is a single process which is attached to the regular profile. The extension itself specifies spanning or split mode (spanning is the default) and many extensions wouldn't function properly if we forced them into split mode (another option we looked at). This is exactly how it works in Chrome for regular/private mode, they just don't bother to tell you about it. Our compromise was a warning so you at least know what you're getting in to if you allow it. |
also @shengchalover that warning only appears for spanning mode extensions |
@bridiver thanks for the input. Is that possible to create a separate toggle to force spanning mode extensions into split mode? Users can then test extensions individually and keep those that work properly. The warning would notify them that this toggle may break extension. Possibly a better option rather then allowing all spanning extensions to do what they want in Tor mode. |
@shengchalover unfortunately forcing split mode requires quite a bit of upstream patching which was the other part of the reason we went with the warning. We just can't justify the maintenance cost of the patches for such a niche use case. Remember that this only applies if the extension itself is making any network requests or storing other data about your Tor browsing history. We always display the warning because we don't know if the extension is making any requests or not. In most cases the data that is not going over Tor shouldn't expose anything about what you are doing on Tor unless you have some really sketchy extensions ;) |
@bridiver I was mainly interested in the design considerations that lead to such warning, thanks for clarifying. In a sense Brave positions itself as privacy preserving browser, so if some features harm the characteristics of the anonymizing layer a bit that should not be a big deal. Having a Tor network one click away from the main browser window is very handy and eliminates the need for vpn in lots of cases. I am truly glad we now one step closer in making the tor-browsing experience more smooth. Can't wait to run PrivacyPass, 1Password and DarkReader in a Tor tab! Thanks again for the hard work on bringing this proposal to life! |
Verified, following the testplan from brave/brave-core#7304
Verification passed on
Enable the extension in Tor Ensured the extension is accessible via TOR tab when Spanning vs Split Verification passed on
Enable the extension in Tor Ensured the extension is accessible via TOR tab when Spanning vs Split |
Description
Brave only has extensions in regular windows, not Private or Tor. Navigating to
chrome://extensions/
in Private window takes you back tochrome://extensions/
in regular window. Navigating tochrome://extensions/
in Tor window takes you to blank page withExtensions is not available to Guest users.
on it.Brave version (brave://version info)
Reproducible on current release:
The text was updated successfully, but these errors were encountered: