Re:Trustworthy Chrome Extensions, by default
by benjaminjackman on Monday October 01, 2018 @04:26PM
(#18116528)
It would nice too if the user was put first and foremost and the user had to give each fine-grained permission approval before it could be used for the first time. And if the user denied any of those permissions the app would continue to function, (either because it's a requirement for being listed in the store, and/or because the framework sends randomized data to the app on the users behalf).
[ Parent
| on HN ]
Re:Trustworthy Chrome Extensions, by default
by Ajedi32 on Monday October 01, 2018 @04:34PM
(#18116596)
Yes, this is how Android and the Web in general handle permissions. I haven't yet seen what Google is planning for Manifest v3, but I suspect it will use a permissions system built around a similar model, with users getting explicit opt-in prompts for each permission the extension requires. (Though I'm not 100% sure of that yet, it's possible that sort of permissions system might not be practical for browser extensions for reasons I haven't anticipated.)
Re:Trustworthy Chrome Extensions, by default
by danShumway on Monday October 01, 2018 @08:59PM
(#18118037)
The "grant permission just once" option on the web is really nice and I wish more platforms would include it (including extensions).
That and the ease that you can revoke permissions. No going into a separate settings window, just click next to the URL bar and everything shows up.