I would prefer the extension platform to allow users to explicitly control what origins an extension is allowed to be active on, overriding the extension manifest.
This should be the default, and allowing an extension for all origins or wilcard origins should require a mandatory prompt indepenent of the installation process.
Yes, extension privileges are creepy and an ad blocker (ublock origin only, to be exactly) is the only extension I intentionally allow to act on all websites on my behalf.
Which is a conscious tradeoff.
There are other useful extensions though, and I'd prefer a common permission architecture with frequent prompts to the current take-it-or-leave approach.
Yes, extension privileges are creepy and an ad blocker (ublock origin only, to be exactly) is the only extension I intentionally allow to act on all websites on my behalf. Which is a conscious tradeoff.
There are other useful extensions though, and I'd prefer a common permission architecture with frequent prompts to the current take-it-or-leave approach.