age-online icon indicating copy to clipboard operation
age-online copied to clipboard

Enforce user to turn browser into OFFLINE mode

Open gwpl opened this issue 2 years ago • 2 comments

Could you Enforce user to turn either browser (in developer tools) or computer into offline mode ?

Like Banana Split ( https://bs.parity.io/ <=> https://github.com/paritytech/banana_split ) is doing, which when (run locally after downloading .html file) displays message :

Please go offline, so your secrets won't leak accidentally

This application doesn't require Internet access, and you shouldn't be using it from a brower which has one.

It's really trivial to accidentally upload your unencrypted secrets somewhere, with a help of your browser spellchecker, webpage translation extension and such.

In Firefox, please go to Menu→More→Work Offline.

In Chrome, you'll have to open DevTools (Ctrl+Shift+I), then in the Network tab there check the "Offline" checkbox. (DON'T CLOSE DEVELOPER TOOLS AFTER THAT!) 

gwpl avatar Dec 16 '22 22:12 gwpl

How about a nice warning instead? It disappears when the user either shuts off page access with DevTools, actually physically disconnects their computer from the network, or hits the "Dismiss" button.

CleanShot 2022-12-17 at 09 03 39@2x

Forcing a user to do so seems a tad heavy-handed.

nkcmr avatar Dec 17 '22 14:12 nkcmr

It depends on judgement. Some people will not do security measure unless they have to. Fortunately here user does not have to turn off internet connectivity to whole computer, but can temporarily turn it off in a browser. But, again, depends on your judgement, warning is absolutely great improvement to overall situation and design! Thank you for care and hard work!

gwpl avatar Feb 02 '23 20:02 gwpl