2 ms·

A browser extension is not a threat model, I'm not sure what you mean.

• klyrs 6y ago
  Browser extensions are an attack surface, examination of which is a key aspect of threat modeling.
  • krageon 6y ago
    It depends on whether or not your threat model includes threats likely to exploit this attack surface. I'm assuming this is why GP said that a browser extension isn't a threat model.