Author: boyska Date: To: tails-dev Subject: Re: [Tails-dev] Tor Browser's default homepage concerns?
Dave: >While I understand the importance of providing users with easy access
>to resources and support, I have some concerns about the potential
>risks associated with this configuration. Specifically, if the Tails
>website were ever compromised or taken over, it could potentially
>serve malicious content to users, undermining the security and privacy
>that Tails aims to provide.
True.
>Could you please provide insight into the rationale behind the
>redirection to the Tails website
The Tails homepage presents the user not only with relevant, up-to-date
documentation: we very often improve documentation *after* a release is
out, specifically to clarify things which have changed meanwhile.
localizations are one case where this is very common.
Accessing what we have on the USB stick is far less effective in helping
the users.
Of course, as with anything whose goal is to be very much up-to-date
(ie: one update per month is not enough), there is a trade-off with
security. We do our best to keep our website secure.
>and the telemetry feature?
What telemetry are you talking about?
> It would also be greatly beneficial if users utilizing the persistent
> storage feature could turn off the homepage, essentially setting it to the
> "about:tor"
It's only beneficial if the downsides of removing Tails website as
homepage are more than the upsides. I'm not sure this is the case, but
if it is, we'd better change this for every user.