409597 - Online Banking TAB - Different Security

Status: RESOLVED WONTFIX

(Firefox :: Security, enhancement)

Description

[MaTias Barletta]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071206 Firefox/2.0.0.11 Flock/1.0.3
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071206 Firefox/2.0.0.11 Flock/1.0.3

Taking Jeremiah Grossman idea of extreme security browsing, 

How about doing a special TAB with extreme security so when I click my online banking bookmark it opens a TAB with an extreme security setting? 
This allows one to not switch to a new safe browser (by settings) and we can promote firefox as an online banking friend.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.

Comment 1

[Jeremy Baron]

How would this new tab be any safer than the old one?

Are you talking about a vanilla Firefox install with no settings changed or extensions installed?

Comment 2

[MaTias Barletta]

This can could have a total different set of security settings. You may have a tab  with differents setting for cookies, certificates, forgery, even prevent you from remembering the password, and maybe also disabling some of the extensions.

Comment 3

[Jesse Ruderman]

Having a separate *set* of cookies might protect you from XSS, CSRF, etc.  I don't see how different settings would protect you, and most of those settings are per-site anyway.

Comment 4

[MaTias Barletta]

Ok. Thanks for your time guys!

Comment 5

[Daniel Veditz [:dveditz]]

Mozilla Labs's "Weave" might help -- it's Firefox, but you could create dedicated instances (separate profiles) for high-value sites. That's not really any different from what Jeremiah is doing though, and anything less wouldn't address the risks he's trying to reduce.