search

mozilla / blurts-addon

Mozilla Public License 2.0
5 stars 8 forks source link

Consider suppressing door-hanger after user has verified subscription #115

Open groovecoder opened 6 years ago

groovecoder commented 6 years ago

From Slack discussion:

so my concern is that if we show it every time even if the user has already seen that they have a breach on that site and hopefully already remedied that situation that people will turn them off completely

the ideal flow might be:

  1. notification
  2. check site/sign up
  3. change all stolen account info
  4. only show doorhanger for NEW breaches if people turn it off because we’re repeating info they already know then we lose the opportunity to do new alerts only in the future

One potential solution is for the add-on to detect a 200 OK response at https://monitor.firefox.com/user/verify and set a flag to suppress the door-hanger after that?

groovecoder commented 6 years ago

Ping @MattGmoz

MattGMoz commented 6 years ago

Would that only work for sign ups? I think if you run a scan we could assume that you are then aware of all sites that may be problematic, at least in our MVP.

Another alternative could be that we still show it for every site, but we show the doorhanger collapsed with an icon ala CFR. That way the user still knows that this site was breached at some point, but doesn't get too many notifications.

pdehaan commented 6 years ago

What about the ability to mute the doorhanger per site?

Like, I've seent the doorhanger on linkedin.com, but I've changed my password (or deleted my account, etc). It'd give me a way to hide the doorhanger for specific breaches but not disable it completely.

Although, I guess not disabling it per SITE, but per BREACH. (considering Bell.ca and a few other sites have had multiple breaches). I want to hide THAT breach notification, but not all future breach notifications if the site is re-breached.

MattGMoz commented 6 years ago

@pdehaan I like that as well. Something that indicates you are aware of the current breach so we don't keep telling you, but not something permanent. I think it will mostly depend on what groovecoder and nihanth thinks is reasonable between now and launch.