Make container moving opt-in on setting page

[jonathanKingston]

For the current page action it permits the user to move across a container boundary.

This is a risky operation that is outlined here:
https://github.com/mozilla/testpilot-containers/wiki/Moving-between-containers

[kesselborn]

oh, wow -- thanks.

If you want just tab management, this is what you want.
If you care about tracking and the security benefits of containers, this is not what you want.

I guess I was primarily thinking about tab management and took containers in as an extra but that might of course not be the case for other people ... thanks!

[jonathanKingston]

No worries, let me know if you have any more questions. Looking over your extension so far the other features don't seem to break the encapsulation.

As I mentioned elsewhere, when transferring between containers you might want to consider stripping off known tracking id's like google tracking for example (this will never be perfect but could be a start).

[kesselborn]

do you already have such a warning in testpilot-containers? ... I will check later -- perhaps I could "borrow" the wording as you seem to have given quite some thought to this.
Thanks again.

[jonathanKingston]

We don't provide the ability to transfer the tab with ease for this reason. Obviously users can manually move the tab with copy and paste but warning once on this interface might at least train users if they are interested in the security/privacy advantages. Wordsmithing isn't my forte unfortunately. Which is why that wiki page isn't the best. Firefox normally would use something like "Switching containers can introduce security risk [Read more]( https://github.com/mozilla/testpilot-containers/wiki/Moving-between-containers) X" where the user would have to dismiss the notification manually. Happy to accept changes to that page too if it can be explained more clearly.

…

On Mon, 21 Aug 2017, 10:13 Daniel Bornkessel ***@***.***> wrote: do you already have such a warning in testpilot-containers? ... I will check later -- perhaps I could "borrow" the wording as you seem to have given quite some thought to this. Thanks again. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <https://github.com/kesselborn/taborama/issues/8#issuecomment-323690686>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAUsLFFIZx8gogRggB9XO2vUZLsAk4poks5saUo1gaJpZM4O7pBb> .

[kesselborn]

I'll make it an opt-in option on the settings site, so the implications can be explained accordingly.
I think stripping off some known ids will create the illusion, that we have a solution for the problem which really we haven't.
Users who don't care too much (that would be me) can then move tabs with the knowledge of the problem, others can just leave the option off.