Re: [Add] [EXTERNAL] Re: draft-grover-add-policy-detection-00

[Alec Muffett <[e-mail]>]

As an aside, I am finding it terribly interesting to consider that any
pursuit of "protecting" the user from their installing TorBrowser and using
it willy-nilly MUST be client-based... because it is a matter of
restricting access to such a browser viewed in its aspect as a chunk of
software.

Put differently, from the perspective of some of these enterprise controls
we are talking about, TorBrowser might be viewed as "malware".

Yet: Firefox is literally the foundation of TorBrowser, but somehow when
Firefox is resolving DNS addresses via DoH, it suddenly becomes a problem
where we are talking about the "necessity" of things which otherwise we
dismiss as pervasive monitoring: canary domain names, privacy-busting
beacons, and third party enforcement over someone else's ability to connect
to their intended destination.

Odd, that.

-a