← Back to context

Comment by bpt3

16 hours ago

What would a safe extension model look like to you?

At some point, you have to implicitly trust someone unless you audit every line of code (or write it yourself) and build everything from source that you run.

> What would a safe extension model look like to you?

> At some point, you have to implicitly trust someone

A model so I trust my OS and my browser, and I don't have to trust anyone else, that is, they can't harm me.

  • You need open source extensions (they are now, as the source is included) and you need to personally audit them, or you need to find a browser with every single feature you want.

    Or do you want the browser to enforce permissions on extensions so you can lock them down as well as auditing them?

This is a solved problem for at least ad blockers for over a decade on iOS. The ad blocking extension gives Safari a list of URLs and regex expressions to block

  • No, it's a solved problem for ad blockers, a very specific problem case that extensions have traditionally solved. But the entire concept of extensions is far greater than just "ad blockers", although that's the use case for which 99.9% of people have used them for.

    But there are other uses cases, like cloud2butt.

  • It's solved if you trust Safari. I'm not sure that's the case for the parent poster.

    • So you don’t “trust” Safari but you trust Firefox? In 25 years absolutely no one has accused Apple of storing your browsing data that’s not e2e encrypted (its stored so it can sync across devices).

      7 replies →