2 ms·
An online password manager does the first part of that. What happens to passwords is a matter of trust in those companies and into their security.
by pmontra 5y ago
An online password manager does the first part of that. What happens to passwords is a matter of trust in those companies and into their security.
- shadowgovt 5y agoUsers can reasonably expect an online password manager to exfiltrate their passwords, and if that's what they want they can install one. The problem with the v2 manifest `chrome.tabs.executeScript` API is that it allows any extension that uses that API to become an undocumented password exfiltrator without any changes to the Chrome extension itself. The new API in manifest v3, in contrast, requires that if, say, my clock extension suddenly became a keylogger, the script that did that would show up in the extension. The API change is to make it possible for Google to have any hope of vetting extensions in the Chrome Web Store by controlling how their behavior can mutate after Google has signed off on them for inclusion in the store.