Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Settings re-organization for Privacy/Security/Shields sections #36363

Closed
ShivanKaul opened this issue Feb 26, 2024 · 12 comments
Closed

Settings re-organization for Privacy/Security/Shields sections #36363

ShivanKaul opened this issue Feb 26, 2024 · 12 comments
Assignees
Labels
feature/settings OS/Android Fixes related to Android browser functionality OS/Desktop priority/P3 The next thing for us to work on. It'll ride the trains. privacy security

Comments

@ShivanKaul
Copy link
Collaborator

Proposed changes in brave://settings:

  1. Combine brave://settings/privacy and brave://settings/shields: brave://settings/privacy redirects to brave://settings/shields (so some of our documentation doesn't need to be updated). The new settings menu title will be Privacy and Shields. Icon can be the existing Shields icon.
  2. Move Auto-redirect AMP pages, Auto-redirect tracking URLs and Prevent sites from fingerprinting me based on my language preferences into Privacy.
  3. Add new subsection in Privacy and Shields called Data Collection and move P3A, daily usage ping and diagnostic reports under it. This is independently useful and can be done in a separate work item as well.
  4. After the above are done, brave://settings/shields will contain the following sections: Shields, Privacy, Data Collection, Social Media Blocking.
  5. Move Security to be its own top-level settings menu. Icon can be existing icon for Privacy and security. brave://settings/security will become a top level menu item that contains:
    • Tor Windows
    • Safe browsing
    • Safety Check
    • Advanced (submenu that contains security > advanced items)
@ShivanKaul ShivanKaul added security privacy feature/settings OS/Android Fixes related to Android browser functionality OS/Desktop labels Feb 26, 2024
@ShivanKaul
Copy link
Collaborator Author

cc @diracdeltas @rebron

@fmarier
Copy link
Member

fmarier commented Feb 27, 2024

Tor Windows

Seems to me like Tor is a privacy feature (hiding IP address), not a security feature.

@ShivanKaul
Copy link
Collaborator Author

I could go either way on Tor, one consideration was that the Privacy section was already full. We could alternatively rename the Security section "Security & Tor Mode"

@rebron rebron added the design/needs-mock-up needs-mockup A feature which needs design mockup to be implemented. label Feb 28, 2024
@rebron rebron self-assigned this Feb 28, 2024
@rebron rebron added the priority/P3 The next thing for us to work on. It'll ride the trains. label Feb 28, 2024
@ShivanKaul
Copy link
Collaborator Author

ShivanKaul commented Feb 29, 2024

@rebron it would be good to have a link to https://brave.com/privacy-updates/7-ephemeral-storage/ somewhere where we talk about 3p cookies in settings, similar to how Firefox has a link to Total Cookie Protection where the user can choose cookie policy. This is a niche concern but it is true that we are not technically outright blocking 3p cookies in all cases, we're partitioning them by top-level site for frames and clear them when the tab closes (which is more protective than FF which partitions but never deletes.)

@rebron
Copy link
Collaborator

rebron commented Mar 1, 2024

https://www.figma.com/file/IXNCYwXmMWaF6u7Pdv1pOW/Desktop-settings---Nala?type=design&node-id=1155-30539&mode=design&t=ZIB63ZKvPuQkxD60-0

Option 1: Tor in the Shields and Privacy section
Screenshot 2024-02-29 at 8 34 52 PM

Screenshot 2024-02-29 at 8 35 01 PM

Option 2: Tor in the Security section
Screenshot 2024-02-29 at 8 35 26 PM
Screenshot 2024-02-29 at 8 35 33 PM

Thanks @minkyeongshin for the design mocks.

@rebron rebron removed the design/needs-mock-up needs-mockup A feature which needs design mockup to be implemented. label Mar 1, 2024
@rebron
Copy link
Collaborator

rebron commented Mar 1, 2024

@ShivanKaul @diracdeltas Options 1 and 2 above based on the original description.
I have another option 3 proposal to do items 2 and 3 in the description and moving the third party cookies sub-menu item to Shields. Let me put a mock together for that option 3 which may be easier to maintain.

@ShivanKaul
Copy link
Collaborator Author

@fmarier wdyt about putting Tor into Security and renaming it "Security & Tor Mode", based on the screenshots above?

@fmarier
Copy link
Member

fmarier commented Mar 1, 2024

Another thing that's going to be a little weird after the switch is:

  • encrypting web pages is in privacy (HTTPS upgrades)
  • encrypting DNS queries is in security (DoH)

They're both security features which improve privacy, but they're in different top-level sections.

@fmarier
Copy link
Member

fmarier commented Mar 1, 2024

Looking at the new security settings, these are mostly things that don't really deserve top-level real estate:

  • TLS cert management
  • disabling Safe Browsing
  • V8 security

and then we have the Safety Check section which is pretty useless in Brave to be honest and should probably just be removed. Maybe we don't need a top-level security section?

@rebron
Copy link
Collaborator

rebron commented Mar 7, 2024

Option 3. This option has the lowest touch, keeps Shields as top level label, Security and Privacy as top level label, and covers items 2 and 3 in the issue but also removed Third party cookies from Privacy and Security and put that sub-menu option into Shields.

Screenshot 2024-03-06 at 7 04 46 PM Screenshot 2024-03-06 at 7 05 00 PM

@fmarier
Copy link
Member

fmarier commented Mar 7, 2024

Option 3 feels like a good first step to me.

@rebron what do you think about hiding the Safety check section entirely? I don't think it's providing a lot of value in Brave.

@rebron
Copy link
Collaborator

rebron commented May 2, 2024

Closing as a dupe of #36859. Fix will be reflected/released in 1.66.x.

@rebron rebron closed this as completed May 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature/settings OS/Android Fixes related to Android browser functionality OS/Desktop priority/P3 The next thing for us to work on. It'll ride the trains. privacy security
Projects
None yet
Development

No branches or pull requests

4 participants