`nar wrote:I hadn't thought about moving the icon, that makes sense. Single click works for just top level domain right?
Yes, it's the default config on the 'general' tab and the only one in bold. "Left clicking on NoScript toolbar button toggles permissions for current top-level site"
That's great for novices! Why isn't that standard?
A little too much futzing with the user's real-estate; toolbar buttons are not welcome to the general user, while statusbar ones are the usual polite flags for processes, I fancy.
I would eventually like to see NS up there right next to the "stop loading" standard button in all Fx default installs. It's analogous to the stop button and users may appreciate being reminded that loading doesn't stop once the pretty pictures are on display.
Note that a user is able to do that top-domain toggle with the CTRL SHFT BACKSLASH combo regardless of the location of the button.
A couple of my pensioner group find it a lot easier to keyboard around than to grip and control a pointing device.
I even like the ietab icon better there as well. I used to show users the global allow so they wouldn't get pissed of when they couldn't buy anything online see videos, or manage their finances, but found that they never turned it off and got reinfected. Now I show them ietab instead.
That's a good tip. I'll load ietab at our next library session for a couple of the more impatient users who still want to get used to NS when it's not a banking or a pension matter.
My job is a little easier because most of these library users are motivated to secure use, coming to the web because they are forced to and not for the web2 stuff as entertainment or socialising. Although I do see some begin to get cool about surfing, when they think they know it all
I don't use the Force HTTPS because exceptions and bugs can stop vital functions. The best training there is to bookmark their secure logins and have a session on how to use the Fx config and extensions to suss out their own particular secure needs.
I prefer to show the users the browser.identity.ssl_domain_display;2
config so they get a confirmation of the domain in the certificate/url match, combined with the ShowIP extension for confirming their decision by the numbers.
This makes most of the usual hurdles (multimedia, logins, menus,buttons) show up pretty quickly, and so the users get a concentrated practise in using the top domain toggle and place-holders, and - if we're lucky - a ClearClick© false positive.
After a couple of sessions, the users split quite distinctly into 2 groups. The first is pleased to be navigating securely if a bit slowly, as they check out each plugin and domain when a function's needed.
The second is impatient and has usually asked to turn NS off.
That's when I put the "allow all this page" items back into the menu.
Some people don't want to bother and I don't think they can be helped while the web is still as it is.
The video isn't on the update page though. That is the only page I usually see, or the end user will see. I see it on the main page, though it is very easy to miss. It needs to be in big bold words at least, preferably with a jpg image of the video to get attention as to the fact that it is more than just words. I learned a long time ago, less is more. I see a lot of words and I think, 'I'm not THAT intersted.'
Maybe a link to it from the forum here would go better while it's getting thought about? - up in the sticky quickstart beginners guide in the support forum?
http://forums.informaction.com/viewtopic.php?f=7&t=268
I am looking now for a better video, we need one that explains WHY one needs to "break" their websites in the first place.
I've been tossing around an idea that there could be a dummy site written where some of the basic active content traps can be demonstrated and where new users can be sent to get a clue.
Proof-of-exploit sites seem to be quickly set up by coders when new exploits are demonstrated, so it may be within the remit of coders to put them up for NS - - - -when time actually allows !!
No amount of saying the devil will bite you means a thing to those who have no overview of how scripts can run.
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.10) Gecko/2009042523 Ubuntu/9.04 (jaunty) Firefox/3.0.10