2 ms·
Okay ? If FF knows signature of known bad extension why would it block it only on some sites?! That makes zero sense from security perspective. It would be l
by ilyt 3y ago
Okay ? If FF knows signature of known bad extension why would it block it only on some sites?!
That makes zero sense from security perspective.
It would be like asking antivirus to only let virus access D:\ drive...
- Groxx 3y agoYeah, the site-specific blocking seems... mostly dubious, possibly decent as a "this is a banking website - extensions are disabled by default, but you can click to enable them" thing. Right now it looks much more dubious than anything though. But even in the very best case, it's yet another custom "premium support" feature either way, like the Public Suffix List. They should push for standards instead, these kinds of things are always leaky and sometimes dangerous. Anyway. I just meant that extensions are not trustworthy just because they're installed. Malicious vectors exist, and protecting people from themselves / them understandably not being an up-to-date expert in all things tech by the millions-to-billions is largely a good thing.