Privacy Web Docs

How to develop for the private web?

antonela@torproject.org

hiro@torproject.org

Hi! 👋

Hi, I am Antonela..

• I lead the UX Team at the Tor Project.
• I am a product designer.
• I have been traveling around the world the last seven years. I want to stay at home now.

Hi, I am silvia..

• Some known me as Hiro.
• I work at the Tor Project.
• I am also part of the Information Security Group in the Department of Telematics Engineering at UPC-Barcelona where I got my Ph.D.

Know your onions

• What is Tor and what it can do for you.

• What is Tor Browser.

• How to build a private website

• We made a styleguide

• Let's collaborate!

What is        and

what it can do for you

Tor is a privacy tool

• Tor is free software.
• Tor is a community made up of a diverse group of developers, researchers, relay operators, volunteers.
• Tor is an open network.
• Tor is a non-profit.

Tor is about 2M daily users using the network!

Tor is about 1K bridges and 6K relays

What does Tor do?

• Tor provides privacy.
• Tor provides anonymity.
• Tor provides communication security.
• Tor provides a traffic analysis resistant communication network.
• Tor provides reachability against censorship.

How does        provide Privacy and Anonymity?

Privacy by design

Tor provides privacy by distributing TRUST

How Tor works

Alice wants to talk to some Bob. Alice also wants to stay safe.

🖳

🖳

🖳

🖳

🖳

🖳

🖳

🖳

🖳

💻

🖳

Alice's Tor client obtains a list of Tor nodes from a directory server and picks a random path to destination server.

Alice

bob.com

DS

How Tor works

Anonymity > Encryption

Anonymity > Encryption

•     Encryption doesn't hide conversations metadata
•     Encryption doesn't hide your social graph
•     Encryption doesn't hide network metadata
•     Encryption doesn't hide your location

Using         at the app layer:

Tor Browser

What is Tor Browser

Tor Browser limits fingerprinting by normalizing different trackable browser features, canvas, fonts, windows size.

What is Tor Browser

Tor Browser is a modified Firefox ESR.

Tor Browser Packages:

• Tor, Torbutton,

• TorLauncher,

• NoScript,

• and HTTPS-Everywhere.

Why Tor makes a browser

Tor browser is designed to:

• Ensure the safe use of Tor.
• Reduce linkability of user activities on different websites.

users who want to browse privately have browsing issues

Gallagher, Kevin & Patil, Sameer & Dolan-Gavitt, Brendan & McCoy, Damon & Memon, Nasir. (2018). Peeling the Onion's User Experience Layer: Examining Naturalistic Use of the Tor Browser. 1290-1305. 10.1145/3243734.3243803.

Gallagher, Kevin & Patil, Sameer & Dolan-Gavitt, Brendan & McCoy, Damon & Memon, Nasir. (2018). Peeling the Onion's User Experience Layer: Examining Naturalistic Use of the Tor Browser. 1290-1305. 10.1145/3243734.3243803.

SHOULD DEVELOPERS DEPLOY SECURE WEBSITES?

🤘

webPrivacy.rocks

How to build a Private website?

Do you review the websites you build for security and privacy?

Do you test on any up-shield browser?

Have you ever thought about implementing privacy checks in your dev cycle?

Cyberspace.

A consensual hallucination experienced daily by billions of legitimate operators, in every nation, by children being taught mathematical concepts...

A graphic representation of data abstracted from banks of every computer in the human system. Unthinkable complexity. Lines of light ranged in the nonspace of the mind, clusters and constellations of data. Like city lights, receding...

 

William Gibson, Neuromancer

Learn more...

• www.torproject.org
• Tor Browser design doc
  • [www.torproject.org/projects/torbrowser/design/]
• Mozilla Firefox Extended Support Release
  • [www.mozilla.org/en-US/firefox/organizations/]
• Tor Projects
  • [www.torproject.org/projects/projects]
• Tor Rendezvous Specification - Version 3
  • [gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt]
• Secure Messaging with Onion Services, a How-To
  • [blog.torproject.org/secure-messaging-onion-services-how]