Qubes Ideas Incubator

This is a loose list of various better-or-worse ideas that we're consider to include in future versions of Qubes. These might initially just be links to qubes-devel posts, and later when some idea gets more thought we might create separate wiki pages for it.

Firewalling

• ​https://groups.google.com/d/msg/qubes-devel/niMbDhS_nWI/M545pB7JBWYJ

Current status: postponed

Trust levels, colors, data flows

• ​https://groups.google.com/d/msg/qubes-devel/ae0iMbAw8pc/s3RXlrUryXUJ

Current status: planned for Beta 2

Agreed on so far:

• Configurable no of trust levels and mappings to colors (but provided sane defaults)
• Allow select VMs to open URLs/files in other VMs (need user and/or policy approval)

Open questions:

• How the user should configure data-flow policies? (in a user-friendly way)
• Some kind of verification for clipboard sharing (for those who cannot avoid clipboard "up-transfers")

Distributed RPM building

• ​https://groups.google.com/d/msg/qubes-devel/D2Ca4Ef-dh4/bkUexOYyAoUJ

Current status: planned for final 1.0 release.

USB Security Tradeoffs

• ​http://theinvisiblethings.blogspot.com/2011/06/usb-security-challenges.html