Item — HN Reader

That's pretty cool. Thanks for pointing that out. I don't see where it says 'on every update' unless you're referring to the automated checks?

I've always wished extensions had more granular permissions though (a la phones, but more so). I think automated ai security checks sound promising soon.

2 comments

Automated checks are done for every extension on every update. But their recommend extensions they feature on the Extension store, they do other extensive checks for each update.

what permissions do you suggest?

I'd like a way to easily specify exactly what sites an extension can run on. There are extensions that I'd like to run on a subset - often just one or two sites - without giving them access do anything else. For that matter, a way to only activate an extension as a one-off when I click it and on no other tabs.

What about container specific permissions? If they implemented that it would be enough for me since I tend to split up my services by type (eg: shopping, banking, work, hack) so enabling an extensive on a specific set of containers would rock. Right now I think the only control we have is over private tabs/windows?

It took them over a decade to implement per-site isolation when other browsers had it, so don’t hold your breath.

Firefox isn’t the security-first choice.

They don’t pretend to be.

I'm using an extension that does exactly that¹, actually every update of the extension is mostly about then supporting more websites and asking permission to access those.

So maybe more developers could do a all sites and manually select sites option?

¹BPC extension

The extension can declare which websites it can access, but the other commenter was looking for the ability for the user to declare which websites it can access.