3 ms·
Good idea for a browser addon to check for that.
by aero-glide2 5y ago
Good idea for a browser addon to check for that.
- wizzwizz4 5y agoThere's no design of browser add-on that could check for that. They update it every so often as it is, and they could serve the modified version to everybody, but it only does the modified behaviour for some people.
- deleted 5y ago[deleted]
- deleted 5y ago[deleted]
- dane-pgp 5y agoThe browser add-on that comes closest is Signed Page[0], and in theory it could provide TOFU level security by requiring the user to opt in to new versions. For unclear reasons, though, the devs seem to be against implementing that.[1] Any system for protecting against backdoors assumes that someone is auditing the code to check for user-specific code paths, so the only extra layer of security to add is some sort of Binary Transparency. A good example of that is Sigstore, which is being experimentally integrated with the Arch Linux package ecosystem.[2] [0] https://github.com/tasn/webext-signed-pages https://github.com/tasn/webext-signed-pages [1] https://github.com/tasn/webext-signed-pages/issues/13 https://github.com/tasn/webext-signed-pages/issues/13 [2] https://github.com/kpcyrd/pacman-bintrans https://github.com/kpcyrd/pacman-bintrans
- 0kto 5y agoThere is actually one: https://www.mailvelope.com/en/ https://www.mailvelope.com/en/ (works on gpg encrypted mails, and handles decryption / encryption entirely on the client side)