Unfortunately I don't have a choice for that. Cloudflare could be behind any domain so the extension has to patch all HTTP requests (and permissions aren't fine

Unfortunately I don't have a choice for that. Cloudflare could be behind any domain so the extension has to patch all HTTP requests (and permissions aren't finer grained than that). It doesn't do anything invasive though, it just patches a handful of headers to look like the Tor Browser. You can read up on it here: https://github.com/T0astBread/onionflare/blob/master/background.js https://github.com/T0astBread/onionflare/blob/master/backgro... If you have an "unbranded" Firefox build (which means not built by Mozilla) or (iirc) the Developer Edition you can disable mandatory signing, zip the contents of the onionflare repo, call it onionflare.xpi and install it locally instead of using my AMO distribution.