[Dev] [consensus due 11-11-16] Defining the nonprism repo

Joshua Haase xihh at riseup.net
Thu Oct 27 22:36:08 GMT 2016


André Silva <emulatorman at riseup.net> writes:

> On 10/26/2016 11:34 PM, André Silva wrote:
> In my opinion, it should remove our current **hardening** packages to
> include all-features-in-one inside all nonprism packages, more KISS for
> the Parabola packagers :P

I think this packages which are invasive to users should be opt-in.
They should be *visible* nonetheless.

Also, I think nonprism should only contain the hardened packages.
This would mean less work for parabola packagers and
a lesser margin of error for the users.

> Otherwise, Nonprism wiki could contain a reference about opt-out of
> privacy/security surveillance for nonprism users who wish it in a
> different/specific article with suggestions (eg. override options in
> about:config using a user.js file) from Parabola wiki. It could be
> explained in ice{dove,weasel} install files as a notice to looking for
> those articles. What do you think guys?

Or we could provide an easy but optional way (with a small added
overhead) to temporarily use an insecure way where needed.

install files should be a good way to let the users know.



More information about the Dev mailing list