[Withdrawn] RFE: Auto-revoke TA upon leaving site

[Tom T.]

This may have been requested before -- sorry if it has -- but a GUI option, "Revoke temporary permissions upon leaving the site".

NS knows when HTTP(S) connections have been requested. Surely it knows when they've been terminated by the user?
If multiple tabs are open at the same site, of course the connection doesn't terminate until the last tab is closed.

Solves both the inconvenience of TA-Revoke and the constant possibility of forgetting to do so.

Would this be difficult to implement? -- inspired by this thread.

[dhouwn]

NS knows when HTTP(S) connections have been requested. Surely it knows when they've been terminated by the user?
If multiple tabs are open at the same site, of course the connection doesn't terminate until the last tab is closed.

What about persistent HTTP connections?

[Tom T.]

NS knows when HTTP(S) connections have been requested. Surely it knows when they've been terminated by the user?
If multiple tabs are open at the same site, of course the connection doesn't terminate until the last tab is closed.

What about persistent HTTP connections?

From the same source you linked:

Mozilla Firefox supports persistent connections. The number of simultaneous connections can be customized (per-server, per-proxy, total). Persistent connections time out after 115 seconds (1.92 minutes) of inactivity which is changeable via the configuration

the default connection timeout of Apache 2.0 httpd is as little as 15 seconds and for Apache 2.2 only 5 seconds.

Presumably, any user who is both security-conscious enough, and knowledgeable enough, to choose this *option* in the GUI, and who is concerned about the 5- or 15-second keep-alive (Idk what other servers default to, but no matter), would configure Fx to shorten the default time from the claimed 115 seconds.

[GµårÐïåñ]

My friend, it has been discussed in length before and I wish I had the link where I gave a detailed explanation why its not a good idea and unadvised from a resource/overhead perspective, as it will require a practical brute force to detect, in some small parts due to persistent connections as mentioned by dhouwn and also cached data (SSL, TLS, DNS, etc). If you want smooth (aka Efficient) and speedy (aka optimized browsing/loading), you are not going to want this given the piss poor implementation and constant problems with Fx memory management and threading.

[Tom T.]

My friend, it has been discussed in length before and I wish I had the link where I gave a detailed explanation why its not a good idea and unadvised from a resource/overhead perspective, as it will require a practical brute force to detect, in some small parts due to persistent connections as mentioned by dhouwn and also cached data (SSL, TLS, DNS, etc). If you want smooth (aka Efficient) and speedy (aka optimized browsing/loading), you are not going to want this given the piss poor implementation and constant problems with Fx memory management and threading.

Will withdraw, thanks.

[GµårÐïåñ]

I hope you didn't take that as being somehow dismissive my friend. I was simply saying that given Giorgio's brief negatory and avoidance approach to this topic that has come up many times, and the reasons given in length as to why by me and cursorily supported by him, I highly doubt it will be done given the current infrastructure unless something seriously drastic changes. I have actually found some situations where it would be helpful but normally not an issue for me. I can definitely see need/reason/desire for it, but I also know the technical limitations/requirements can be very messy and counterproductive. Although I suppose giving an optional setting to choose it for those who accept the risk of what it implies would be something I have always supported but as a default setting, too messy.

[Tom T.]

I understood all of that. You gave an excellent explanation of why it wouldn't be implemented, and probably shouldn't be. Hence the "brief" thanks, lest I be too verbose. (in-joke from another thread, lol.) No offense taken; the thanks were sincere.

[GµårÐïåñ]

Hence the "brief" thanks, lest I be too verbose. (in-joke from another thread, lol.) No offense taken; the thanks were sincere.

Now don't be like that , I have never claimed you were verbose, thorough - damn straight, verbose in the negative sense, never.